How do I create a user?

Creating a user.

How do I limit user rights to specific namespaces?

Use the limitNamespaces parameter in the ClusterAuthorizationRule CR.