apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: system:kcp:universal-clusterworkspacetype-use
rules:
- apiGroups: ["tenancy.kcp.dev"]
  resources: ["clusterworkspacetypes"]
  resourceNames: ["universal"]
  verbs: ["use"]
