kubectl get clusterrole -o wide
kubectl get role -A -o wide