services / Google Cloud / Kubernetes Engine Role Bindings

A RoleBinding is used to associate a Role with one or more principals (users, groups, or service accounts). It establishes a connection between a set of permissions defined in a Role and the entities that should have those permissions. Roles are scoped to a specific Kubernetes namespace.

Roles are only definitions of permissions. A role does not take effect unless assigned to principal via a RoleBinding.

container.​roleBindings.​delete

Deleting a RoleBinding removes the permissions of the Role from a list of principals

Risks

1. Policy destruction (CRITICAL)

Scope: CRITICAL

This privilege may grant access to sensitive data from a significant fraction of organizational functions, allow interruption of critical organizational services, or its exploit could lead to significant privilege escalation.