...
For using the Agent Bakery with a normal monitoring user, you need four permissions. If you enable only "Bake agents" and "Sign agents," you won't be able to use the bake or sign button.
Info |
---|
For enabling the normal monitoring user to use the Agent Bakery to bake and sign agents, you need at least three four permissions. If you enable only "Bake agents" and "Sign agents," you won't be able to use the bake or sign button. |
Status |
---|
colour | Green |
---|
title | LAST TESTED ON CHECKMK 2.03.0P1 |
---|
|
Panel |
---|
borderColor | black |
---|
bgColor | #f8f8f8 |
---|
title | Table of Contents |
---|
|
|
...
Permissions
This is because you need the additional role "Configuration of agent updates." With these four roles, you should be able to bake and sign the agent in the Agent BakeryIn this guide, we will show you which are the permissions you need to modify in order to allow the normal monitoring user to use the agent bakery to bake and sign agents.
Why we designed this like that:
Permission name | Description |
---|
Manage Monitoring Agents | With these permissions, you're able to see the available agents |
Configuration of agent updates | This permission allows complete control of the automatic agent updates. But not to release the agents. |
Bake Agents and Sign Agents | Bake and sign the new agents. With these permissions, you're able to release the agents. |
Initially, we thought that "Configuration of agent updates" was the default role for dealing with the agents.
Note |
---|
In the future, we might change this concept! |
...
| Already available for role |
---|
Use WATO | This permission allows users to use Setup - Checkmk's Web Administration Tool. Without this permission all references to Setup (buttons, links, snap-ins) will be invisible. | Normal monitoring user |
Make changes, perform actions | This permission is needed in order to make any changes or perform any actions at all. Without this permission, the user is only able to view data, and that only in modules he has explicit permissions for. | Normal monitoring user |
Manage monitoring agents | Manage customized packaged monitoring agents for Linux, Windows, and other operating systems. |
|
Bake agents | Bake new agent packages for Linux, Windows, and other operating systems. |
|
Sign agents | Sign baked agent packages for Linux, Windows, and other operating systems. |
|
Configuration of agent updates | This permission allows full control of the automatic agent updates. |
|
The first two permissions from the table are already enabled for the normal monitoring user. If you somehow need to create a more restrictive user (based on the guest role) that needs to bake and sign agents, you need to assign all the six permissions to your guest user.
Related articles
Filter by label (Content by label) |
---|
showLabels | false |
---|
max | 5 |
---|
spaces | KB |
---|
showSpace | false |
---|
sort | modified |
---|
reverse | true |
---|
type | page |
---|
cql | label in ( "agent_bakery" , "user_roles_permissions" , "user" , "roles" ) and type = "page" and space = "KB" |
---|
labels | agent_bakery user_roles_permissions roles user |
---|
|
...