A lot of users are asking for a role in checkmk which is using by the agent updater and only for the registration process. At the moment, there is no build in role. Please follow this short how-to if you want to have this kind of role
...
| Note |
|---|
We always recommend using the GUI instead of modifying .mk files. For any issue or broken config we do not provide any support. The easiest way to build an agent registration role is using the GUI and following these steps: Create a copy of the guest user and ensure he has the following permissions:
On exceptional circumstances you might want to adjust configuration files with caution. Please do a backup before adjusting the files. |
The config file way
- Pretty print the configuration for a better overview: Pretty-print the configuration files
Add the following section to the config file: ~/etc/check_mk/multisite.d/wato/roles.mk
Code Block 'agent': {'alias': 'agents registration and download', 'basedon': None, 'builtin': True, 'permissions': {'general.use': True, 'wato.download_all_agents': True, general.see_all': True}}})Now we build a new role, only to register the Checkmk Agent with two roles! The whole config file should look like this:
Code Block # Written by Checkmk store roles.update({'admin': {'alias': 'Administrator', 'builtin': True, 'permissions': {}}, 'admin': {'alias': 'Administrator', 'basedon': 'admin', 'builtin': False, 'permissions': {}}, 'guest': {'alias': 'Guest user', 'builtin': True, 'permissions': {}}, 'user': {'alias': 'Normal monitoring user', 'builtin': True, 'permissions': {}}, 'agent': {'alias': 'agents registration and download', 'basedon': None, 'builtin': True, 'permissions': {'general.see_all': True, 'general.use': True, 'wato.download_all_agents': True}}}) ~
...