Description of problem:

Currently members of the dedicated-admin group are allowed to create and delete users but they can still be blocked from deleting users because the dedicated-admin group is not allowed to list/delete oauthclientauthorizations:

# // Running this command as dedicated-admin user john.doe
# oc delete user foo.bar
Error from server (Forbidden): User "john.doe" cannot list all oauthclientauthorizations in the cluster


Allowing dedicated-admins to list/delete oauthclientauthorizations would resolve the above issue.

Version-Release number of selected component (if applicable):
3.4.1.18