When trying to expose a service to create a route, user with the "clusterrole/edit" on the namespace is getting:

//////////
Error from server (Forbidden): routes.route.openshift.io is forbidden: User "system:serviceaccount:<>" cannot create resource "routes" in API group "route.openshift.io" in the namespace 

This is caused by missing permissions on the route in the cluster role edit.

~~~
# oc get clusterrole edit -o yaml | grep -i route
~~~

However, checking the OpenShift, the same role, the output is:

~~~
# oc get clusterrole edit -o yaml | grep -i route
  - route.openshift.io
  - routes
  - route.openshift.io
  - routes/custom-host
  - route.openshift.io
  - routes/status
  - route.openshift.io
  - routes
~~~

It means that either the role is incomplete or incorrectly added. 

MicroShift 4.17

# oc get clusterrole edit -o yaml | grep -i route

Or create service account, add the "edit" role and check if you can create Route under the service account.

    1.
    2.
    3.
    

I wasn't able to find the reference to the clusterrole/edit in the github repo.