- Remove spoofed rbac role template type - Use spoof's base type's management global role and role template types - Display these types as global, cluster and project tables in auth product