Can we create a user and grant read-only for specific namespace ?

[izecy]

Hi skooner team,

As my understand for now, we need to use cluster role and cluster role binding for service account to access the dashboard. Is there anyway to create user and grant some limit permissions like only read a container logs in specific namespace. For example, User A can see container logs in develop namespace, User B can see container logs and execute to pod in staging namespace.