Assigning clusterrolebindings/rolebindings to groups is ineffective in AMQ Online 1.0 and 1.1.

oc create clusterrolebinding foogroupbinding --clusterrole=enmasse.io:tenant-view --group=mygroup

A workaround is to assign the clusterrolebindings/rolebindings to the user instead.

oc create clusterrolebinding foogroupbinding --clusterrole=enmasse.io:tenant-view --user=myuser

This is already fixed in AMQ Online 1.2.

This was caused by a defect in the api-server (fix: https://github.com/EnMasseProject/enmasse/pull/2846)