---
title: Who-can
link: https://github.com/vmware-tanzu/sonobuoy-plugins/tree/main/who-can
---

This plugin utilizes the [kubectl-who-can project][1] from Aqua Security to produce a report that shows which subjects have RBAC permissions to perform actions (verbs) against resources in the cluster.

[1]: https://github.com/kubernetes/kubernetes/tree/master/test/conformance/image