Page Comparison

...

1. Pretty print the configuration for a better overview: Pretty-print the configuration files

2. Add the following section to the config file: ~/etc/check_mk/multisite.d/wato/roles.mk.
   

   Code Block
   language bash theme RDark collapse true
   'agent_updater': {'alias': 'agents registration and download', 'basedon': None, 'builtin': True, 'permissions': {'general.see_all': True, 'general.use': True, 'wato.download_all_agents': True}}

   In order to put it to the right place, please add a comma "," before the "})". 

Agent Pairing for TLS Encryption

For a user to be able to do the cmk-agent-ctl register, which is needed to enable the TLS encryption (available from 2.1.0 onwards), you have to add the following rights (internal name "general.agent_pairing") to his/her role.

• Agent pairing
• Read access to all hosts and folders
• Write access to all hosts and folders

At the end the whole file should look like this:

# Written by Checkmk store

roles.update({
 'admin': {'alias': 'Administrator',
           'builtin': True,
           'permissions': {}},
 'guest': {'alias': 'Guest user',
           'builtin': True,
           'permissions': {}},
 'user': {'alias': 'Normal monitoring user',
          'builtin': True,
          'permissions': {}},
 'agent_updater': {'alias': 'agents registration and download',
                   'basedon': None,
                   'builtin': True,
                   'permissions': {'general.see_all': True,
                                   'general.use': True,
                                   'wato.download_all_agents': True}},  
 'agent_ctl': {'alias': 'Agent Controller', 
               'basedon': None, 
               'builtin': True, 
               'permissions': {'general.agent_pairing': True,
                               'general.use': True,
                               'wato.see_all_folders': True,
                               'wato.

...

all_

...

folders': True}}
})
~                                                                   

...

Agent Pairing for TLS Encryption

For a user to be able to do the cmk-agent-ctl register, which is needed to enable the TLS encryption (available from 2.1.0 onwards), you have to add the following rights (internal name "general.agent_pairing") to his/her role.

...

Related articles

...