$ kubectl auth can-i get deployments.extensions
yes

$ kubectl who-can get deployments.extensions
Error: resolving resource: the server doesn't have a resource type "deployments.extensions"