Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.


...

For using the Agent Bakery with a normal monitoring user, you need four permissions. If you enable only "Bake agents" and "Sign agents," you won't be able to use the bake or sign button.

Info
For enabling the normal monitoring user to use the Agent Bakery to bake and sign agents, you need at least three four permissions. If you enable only "Bake agents" and "Sign agents," you won't be able to use the bake or sign button.

Status
colourGreen
titleLAST TESTED ON CHECKMK 2.03.0P1


Panel
borderColorblack
bgColor#f8f8f8
titleTable of Contents

Table of Contents

...

Permissions

This is because you need the additional role "Configuration of agent updates." With these four roles, you should be able to bake and sign the agent in the Agent BakeryIn this guide, we will show you which are the permissions you need to modify in order to allow the normal monitoring user to use the agent bakery to bake and sign agents.

Agent bakery Deploy plugin that updates agent automatically. Interval check 1 hours.


Why we designed this like that:

Permission nameDescription
Manage Monitoring AgentsWith these permissions, you're able to see the available agentsConfiguration of agent updatesThis permission allows complete control of the automatic agent updates. But not to release the agents.Bake Agents and Sign AgentsBake and sign the new agents. With these permissions, you're able to release the agents.

Initially, we thought that "Configuration of agent updates" was the default role for dealing with the agents. 

Note

In the future, we might change this concept!

...

Already available for role
Use WATOThis permission allows users to use Setup - Checkmk's Web Administration Tool. Without this permission all references to Setup (buttons, links, snap-ins) will be invisible.Normal monitoring user
Make changes, perform actionsThis permission is needed in order to make any changes or perform any actions at all. Without this permission, the user is only able to view data, and that only in modules he has explicit permissions for.Normal monitoring user
Manage monitoring agentsManage customized packaged monitoring agents for Linux, Windows, and other operating systems.
Bake agentsBake new agent packages for Linux, Windows, and other operating systems.
Sign agentsSign baked agent packages for Linux, Windows, and other operating systems.
Configuration of agent updatesThis permission allows full control of the automatic agent updates.

The first two permissions from the table are already enabled for the normal monitoring user. If you somehow need to create a more restrictive user (based on the guest role) that needs to bake and sign agents, you need to assign all the six permissions to your guest user.

Filter by label (Content by label)
showLabelsfalse
max5
spacesKB
showSpacefalse
sortmodified
reversetrue
typepage
cqllabel in ( "agent_bakery" , "user_roles_permissions" , "user" , "roles" ) and type = "page" and space = "KB"
labelsagent_bakery user_roles_permissions roles user

...