gitlab agent needs deployment app rights at cluster scope

gitlab agent needs deployment app rights at cluster scope but in restricted environment we need it to use namespace scope