how to allow non cluster-admins access to metrics

[Der-Sysop]

I'm trying (and failing) to allow access to metrics, e.g.
kubectl top nodes
kubectl top pods
to users that are not cluster admins.
I tried

• apiGroups: ["metrics.k8s.io"]
  resources: [""]
  verbs: ["get", "list"]

Am i doing something wrong?
I found nothing in docs or faq about how to do that ..

Thanks.

[dgrisonnet]

/assign