Start with yourself:

kubectl auth whoami
kubectl auth can-i delete nodes
kubectl auth can-i '*' '*'

Now become dev, a developer nobody has granted anything yet:

kubectl auth can-i list pods --as dev -n citadel-92lzkg
kubectl get pods --as dev -n citadel-92lzkg

Read the error carefully. It names the verb, the resource, the API group and the namespace that a rule would have to cover.