The Quickstart does not explicitly state that the login should be executed using "oc login -u system:admin", which it should. Just like in the readme file for OpenShift Templates.
Elevated admin rights are not required when you follow Quickstart guide and use restricted flavour of template in-conjunction with SA as an OAuth client.
The Quickstart does not explicitly state that the login should be executed using "oc login -u system:admin", which it should. Just like in the readme file for OpenShift Templates.