Due to upgrade issues with the Envoy gateway and the offline installation environments, upgrading to MKE 4k 4.1.3 is not recommended. These issues will be fixed in a future release. For version 4.1.3, Mirantis only supports fresh installations.

Common grant scenarios

Grant scenario	Detail
Grant Cluster Admin to an Organization	Subject type: organization Subject name: Select your organization. Team name: Leave empty to apply to the entire organization. Namespace: Leave empty, to apply to the entire MKE 4k cluster. Role: Select cluster-admin.
Grant Namespace Developer Access to a Team	Subject type: organization Subject name: Select the organization. Team name: Select the team. Namespace: Select the namespace. Role: Select the appropriate developer role.
Grant Read-Only Access to an LDAP Group	Subject type: group (requires LDAP enablement) Subject name: Select the LDAP group. Namespace: Select a namespace, or leave empty to apply to the entire MKE 4k cluster. Role: Select view or another read-only role.
Grant User Access to a Specific Namespace	Subject type: user Subject name: Select the user (local or LDAP). Namespace: Select the target namespace. Role: Select appropriate role.