apiVersion: rbac.open-cluster-management.io/v1alpha1
kind: MulticlusterRoleAssignment
metadata:
  name: alice-trask-role-assignment
  namespace: open-cluster-management-global-set
spec:
  subject:
    kind: User
    name: alice.trask
  roleAssignments:
    - clusterRole: kubevirt.io:admin
      targetNamespaces: 
        - kubevirt-staging
        - vm-workloads
      clusterSets:
        - staging-clusters
        - production-clusters
    - clusterRole: vm-admin-extended
      targetNamespaces: 
        - vm-workloads
      clusterSets:
        - production-clusters
    - clusterRole: cluster-reader
      targetNamespaces: 
        - "*"
      clusterSets:
        - dev-cluster