For using the agent bakery, you need at least three permissions. If you enable only "Bake agents" and "Sign agents," you won't be able to use the bake or sign button.
LAST TESTED ON CHECKMK 2.0.0P1
Permissions
This is because you need the additional role "Configuration of agent updates." With these four roles, you should be able to bake and sign the agent in the agent bakery.
Why we designed this like that:
| Permission name | Description |
|---|---|
| Manage Monitoring Agents | With these permissions, you're able to see the available agents |
| Configuration of agent updates | This permission allows complete control of the automatic agent updates. But not to release the agents. |
| Bake Agents and Sign Agents | Bake and sign the new agents. With these permissions, you're able to release the agents. |
Initially, we thought that "Configuration of agent updates" was the default role for dealing with the agents.
In the future, we might change this concept!
Attention: in 2.1, "Bake Agents and Sign Agents" becomes two options: "Bake agents" and "Sign agents," which must be set to "Yes," respectively!
Related articles