RBAC to allow users to click the refresh button on external secrets

[randy-coburn-zeam]

I would like to implement a readonly policy that has a few exceptions.

One of the exceptions is to hit the refresh button that pops up in ArgoCD for external secrets. However I have no idea how this is represented in the api.

I therefore have 2 questions:

1. How do I trace api requests so I can see what API commands are being issued so I can translate these to argo rbac lines.
2. Does anyone already have this and can share the line required?

Here is a picture of the button I want to enable them to activate.