Global Search User Configuration - stolostron/search-v2-operator GitHub Wiki

The user who has access to Global Hub Search Console is assumed to have access to view all the resources in the Global Hub and its corresponding leaf hubs and their managed clusters.

The global-search-user cluster role exists on all ACM hubs and gives access to all managed cluster resources attached to that hub. Creating a user bound to this role (by adding a cluster role binding), will enable the user to Search for and view all the managed cluster resources. Users with the role global-search-user won’t see any resources from the local-cluster in their search results, regardless of whether they are authorized to see these resources.