# RBAC role verbs missing from output

**URL:** <https://discuss.kubernetes.io/t/rbac-role-verbs-missing-from-output/14075>\
**Category:** General Discussions\
**Created:** [December 13, 2020, 6:16am UTC](https://discuss.kubernetes.io/t/rbac-role-verbs-missing-from-output/14075 "2020-12-13T06:16:59Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![schollii](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.kubernetes.io/schollii/32/5103_2.png) [@schollii](https://discuss.kubernetes.io/u/schollii)\
**Post date:** [December 13, 2020, 6:16am UTC](https://discuss.kubernetes.io/t/rbac-role-verbs-missing-from-output/14075/1 "2020-12-13T06:16:59Z")

</div>

Kubernetes version: 1.13 - 1.19 (and likely 1.20)

I noticed that `kubectl api-resources -o wide` gives a comprehensive list of RBAC verbs for each resource type.

However,

- it is missing a few “specialized verbs” like `bind`, `escalate`, `uses`, etc mentioned briefly in the [Determine the Request Verb section of Authorization Overview](https://kubernetes.io/docs/reference/access-authn-authz/authorization/#determine-the-request-verb)
- users and groups are not resources in kubernetes but there are at least 2 verbs associated, so user and group should be rows in that output (with empty in api column), or there ought to be a proper command to get all the RBAC verbs that exist
- the [docs mentioned above](https://kubernetes.io/docs/reference/access-authn-authz/authorization/#determine-the-request-verb) says “Kubernetes sometimes checks authorization for additional permissions using specialized verbs. For example:…” which indicates there may be more than the half dozen examples.

Seems to me that a command to get an exhaustive list of all verbs relevant to RBAC would be really useful. Eg `kubernetes auth verbs NAME` would show all verbs for `NAME` (pod, user, role etc), similar table format to `api-resources` but its focus would be auth.

Is this the right place to propose/discuss such improvement? Assuming it is not too big a job, would it be a good first PR to contribute to kubernetes?
