How would you answer an interview scenario involving Kubernetes RBAC and security?

A microservice only needs to read one ConfigMap in its namespace. Explain how you would grant the minimum required permission.