kubectl api-resources # List all possible resources to "get"

kubectl auth can-i $VERB $RESOURCE 

For example, to check if user logged with configuration dev-k8s-config can get pods/log resource on cluster beebox-mobile:

kubectl auth can-i get pods --subresource=log -n beebox-mobile --kubeconfig /home/cloud_user/dev-k8s-config