Hi,

For daily admin operation in K10 you can use K10-admin role or you can use your own clusterrole with K10 permissions.  https://docs.kasten.io/latest/access/rbac.html#default-k10-clusterroles

About K8s, no much information in K10 docs, but as far as I understand, cluster-admin role isn’t actually mandatory for deployment or daily operation.  You could use your own clusterrole with the minimum privileges to deploy K8s resources, and to deal with them (get, list,  create, update, delete): https://kubernetes.io/docs/reference/access-authn-authz/authorization/.  

Basically K10 needs enough permissions to deal with the resources during backup and restore operations, so a too restricted account most likely won’t work.