Run something like:

$ kubectl --as=system:serviceaccount:MY_NAMESPACE:MY_SERVICE_ACCOUNT auth can-i get configmap/MY_CONFIGMAP

I work as a freelancer, so if you don’t want to do that kind of things yourself or don’t have the time, just drop me a line to hire me.