code: func RoleForUser(u User) Role {
  	return &RoleV3{
  		Kind:    KindRole,
  		Version: V3,
  		Metadata: Metadata{
  			Name:      RoleNameForUser(u.GetName()),
  			Namespace: defaults.Namespace,
  		},
  		Spec: RoleSpecV3{
  			Options: RoleOptions{
  				CertificateFormat: teleport.CertificateFormatStandard,
  				MaxSessionTTL:     NewDuration(defaults.MaxCertDuration),
  				PortForwarding:    NewBoolOption(true),
  				ForwardAgent:      NewBool(true),
  			},
  			Allow: RoleConditions{
  				Namespaces: []string{defaults.Namespace},
  				NodeLabels: Labels{Wildcard: []string{Wildcard}},
  				Rules:      CopyRulesSlice(AdminUserRules),
  			},
  		},
  	}
  }
docs: // RoleForUser creates an admin role for a services.User.