Is there documentation or an example somewhere of

specifying a RBAC group for REST queries so I can create a specific user with REST access only ?

Also,

does how does the above interact with a REST query for the equivalent of ls -led in a namespace ? An example might clarify question

A REST call to say list snapshots or NFS exports presumably  has sufficient permissions from a RBAC group for REST queries

Does a REST call for the equivalent of ls -led /ifc/mynamespace/myfile work with a RBAC group for REST queries or if not how does it decide what to access and what to deny ?