Cluster-scoped permissions for operators