The jaeger-operator role is quite wide-ranging, and seems entirely too wide for users who just need to CRUD a single resource (jaegertracing.io.Jaeger).

The application of the jaeger-operator role in this way was seen in the Openshift installation instructions but we're not using Openshift here. It is however the only place that talks about letting non-privileged uses (in our case, a CI builder service account) create Jaeger instances.