# Adding users to the cluster admin group
To add cluster admin privileges to a particular user do the following.

When authenticating to the Openshift cluster via ACO, it will automatically create a User object within Openshift. eg:

```
kind: User
apiVersion: user.openshift.io/v1
metadata:
  name: email@address.com
...
```

Created a Group ocp-ci-admins, and added the following users. Each "user" corresponds with the metadata, name for the corresponding User object.

```
kind: Group
apiVersion: user.openshift.io/v1
metadata:
  name: ocp-ci-admins
  selfLink: /apis/user.openshift.io/v1/groups/ocp-ci-admins
  uid: 24a5ad4d-7ee0-4e30-8f92-4b398ba5d389
  resourceVersion: '6800501'
  creationTimestamp: '2020-05-27T16:03:26Z'
users:
  - email@address.com
```

Added a ClusterRoleBinding, to bind our Group ocp-ci-admins to the ClusterRole cluster-admin

```
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: ocp-ci-cluster-admins
  selfLink: /apis/rbac.authorization.k8s.io/v1/clusterrolebindings/ocp-ci-cluster-admins
  uid: 7979a53b-6597-4ec7-9d6c-53b5ab8004c7
  resourceVersion: '6799178'
  creationTimestamp: '2020-05-27T16:03:58Z'
subjects:
  - kind: Group
    apiGroup: rbac.authorization.k8s.io
    name: ocp-ci-admins
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: cluster-admin
```