Please clarify documentation with the permissions required

I tried to used it using readonly access to the cluster, but it failed:

```
kubectl dig ip-172-30-224-124.us-west-2.compute.internal
jobs.batch is forbidden: User "XXX" cannot create resource "jobs" in API group "batch" in the namespace "default"
```

Why does it need access to create new jobs?