Due to upgrade issues with the Envoy gateway and the offline installation environments, upgrading to MKE 4k 4.1.3 is not recommended. These issues are fixed in the 4.1.4 release. For version 4.1.3, Mirantis only supports fresh installations.

Common grant scenarios

Grant scenario	Detail
Grant Cluster Admin to an Organization	Subject type: organization Subject name: Select your organization. Team name: Leave empty to apply to the entire organization. Namespace: Leave empty, to apply to the entire MKE 4k cluster. Role: Select cluster-admin.
Grant Namespace Developer Access to a Team	Subject type: organization Subject name: Select the organization. Team name: Select the team. Namespace: Select the namespace. Role: Select the appropriate developer role.
Grant Read-Only Access to an LDAP Group	Subject type: group (requires LDAP enablement) Subject name: Select the LDAP group. Namespace: Select a namespace, or leave empty to apply to the entire MKE 4k cluster. Role: Select view or another read-only role.
Grant User Access to a Specific Namespace	Subject type: user Subject name: Select the user (local or LDAP). Namespace: Select the target namespace. Role: Select appropriate role.