anthos kubectl IAM capabilities

[christiancadie3]

I am evaluating anthos  and have the following requirement

Is it possible to organize users in groups, have the same user in multiple groups and control at the level of  group or user within a group, which kubernetes cluster is accessible for these same groups and users and what is allowed. 

Example:

in group1, admin1 can create namespaces.

in group1, user2 cannot create namespaces but can create deployment in specific namespaces already created for him by his  admin1 , and can only access  cluster1,2,3 

in group2 , same user2 can create deployment and policies in other namespaces but only in cluster2,3,4

[siegfredv]

Once you have set up authentication, you can then use standard Kubernetes role-based access control (RBAC) to authorize authenticated users to interact with your clusters, as well as Identity and Access Management to control access to Google services.

You can define this set of permissions by creating a ClusterRole RBAC resource,

Note that users also need IAM permissions to view clusters in the Google Cloud console