We have jobs running using serviceaccounts. But for accesing the reource manager and related web ui's using individual user account. But if a user started job using service account , he is not able to view the application and container logs stating you are not authorized.  How to overcome without adding user to admin group.