I Think I figure it out.
Once we onboard the Cluster in AZURE-ARC, either we bind the service Account to a cluster admin role, or we only install the monitoring extension (as an example )
`enter code here`az k8s-extension create --name azuremonitor-containers --cluster-name <cluster-name> --resource-group <resource-group> --cluster-type connectedClusters --extension-type Microsoft.AzureMonitor.Containers --configuration-settings logAnalyticsWorkspaceResourceID=$WorkspaceId
Can I get a confirmation ,please.