Bug: Rancher namespace creation permissions grants delete access also.
- Under Global-> Security → Roles → Project, click add role and create a custom role with namespace creation permission.
- Bind the newly created custom role to a user. Now the user should only be able to create a namespace from Rancher UI.
But the user is also able to delete the namespace which should not happen.