Agent registration role

To register agents, both for agent updates and for TLS encryption, it might be desirable to have a dedicated user and role at hand. This article outlines how that can be achieved.

LAST TESTED ON CHECKMK 2.2.0P1

Table of Contents

Getting Started

Background information regarding this subject is available on our:

Agent Registration for Automatic Updates

The UI way

The easiest way to build an agent registration role is by using the GUI and following these steps:

Create a copy of the guest role and name it meaningfully.
Ensure the role has the following permissions:
- "Use the GUI at all"
- "Register Host & download monitoring agents of your hosts",
- "Register all hosts & download all monitoring agents"
Optionally you can disable all other permissions.
Create a user with a meaningful name
Configure the following things:
- Authentication: Automation Secret
- Assign the agent registration role created before

The config file way

We always recommend using the GUI instead of modifying .mk files. For any issue or broken config, we do not provide any support.

In exceptional circumstances, you might want to adjust configuration files with caution. Please do a backup before adjusting the files.

Pretty print the configuration for a better overview: How-to enable Pretty-print configuration files

Add the following section to the config file: ~/etc/check_mk/multisite.d/wato/roles.mk.

~/etc/check_mk/multisite.d/wato/roles.mk

 'guest_for_registration': {'alias': 'guest_for_registration',
                            'basedon': 'guest',
                            'builtin': False,
                            'permissions': {'action.acknowledge': False,
                                            'action.addcomment': False,
                                            'action.clearmodattr': False,
                                            'action.customnotification': False,
                                            'action.delete_crash_report': False,
                                            'action.downtimes': False,
                                            'action.enablechecks': False,
                                            'action.fakechecks': False,
                                            'action.notifications': False,
                                            'action.remove_all_downtimes': False,
                                            'action.reschedule': False,
                                            'action.star': False,
                                            'background_jobs.delete_foreign_jobs': False,
                                            'background_jobs.delete_jobs': False,
                                            'background_jobs.manage_jobs': False,
                                            'background_jobs.see_foreign_jobs': False,
                                            'background_jobs.stop_foreign_jobs': False,
                                            'background_jobs.stop_jobs': False,
                                            'bi.see_all': False,
                                            'dashboard.checkmk': False,
                                            'dashboard.kubernetes_cluster': False,
                                            'dashboard.kubernetes_daemonset': False,
                                            'dashboard.kubernetes_deployment': False,
                                            'dashboard.kubernetes_namespace': False,
                                            'dashboard.kubernetes_overview': False,
                                            'dashboard.kubernetes_statefulset': False,
                                            'dashboard.linux_hosts_overview': False,
                                            'dashboard.linux_single_overview': False,
                                            'dashboard.main': False,
                                            'dashboard.ntop_alerts': False,
                                            'dashboard.ntop_flows': False,
                                            'dashboard.ntop_top_talkers': False,
                                            'dashboard.problems': False,
                                            'dashboard.simple_problems': False,
                                            'dashboard.site': False,
                                            'dashboard.windows_hosts_overview': False,
                                            'dashboard.windows_single_overview': False,
                                            'general.acknowledge_werks': False,
                                            'general.act': False,
                                            'general.agent_pairing': False,
                                            'general.change_password': False,
                                            'general.configure_sidebar': False,
                                            'general.csv_export': False,
                                            'general.delete_foreign_bookmark_list': False,
                                            'general.delete_foreign_custom_graph': False,
                                            'general.delete_foreign_custom_snapin': False,
                                            'general.delete_foreign_dashboards': False,
                                            'general.delete_foreign_forecast_graph': False,
                                            'general.delete_foreign_graph_collection': False,
                                            'general.delete_foreign_graph_tuning': False,
                                            'general.delete_foreign_pagetype_topic': False,
                                            'general.delete_foreign_reports': False,
                                            'general.delete_foreign_sla_configuration': False,
                                            'general.delete_foreign_stored_report': False,
                                            'general.delete_foreign_views': False,
                                            'general.delete_stored_report': False,
                                            'general.disable_notifications': False,
                                            'general.edit_bookmark_list': False,
                                            'general.edit_custom_graph': False,
                                            'general.edit_custom_snapin': False,
                                            'general.edit_dashboards': False,
                                            'general.edit_forecast_graph': False,
                                            'general.edit_foreign_bookmark_list': False,
                                            'general.edit_foreign_custom_graph': False,
                                            'general.edit_foreign_custom_snapin': False,
                                            'general.edit_foreign_dashboards': False,
                                            'general.edit_foreign_forecast_graph': False,
                                            'general.edit_foreign_graph_collection': False,
                                            'general.edit_foreign_graph_tuning': False,
                                            'general.edit_foreign_pagetype_topic': False,
                                            'general.edit_foreign_reports': False,
                                            'general.edit_foreign_sla_configuration': False,
                                            'general.edit_foreign_views': False,
                                            'general.edit_graph_collection': False,
                                            'general.edit_graph_tuning': False,
                                            'general.edit_notifications': False,
                                            'general.edit_pagetype_topic': False,
                                            'general.edit_profile': False,
                                            'general.edit_reports': False,
                                            'general.edit_sla_configuration': False,
                                            'general.edit_user_attributes': False,
                                            'general.edit_views': False,
                                            'general.force_bookmark_list': False,
                                            'general.force_custom_graph': False,
                                            'general.force_custom_snapin': False,
                                            'general.force_dashboards': False,
                                            'general.force_forecast_graph': False,
                                            'general.force_graph_collection': False,
                                            'general.force_graph_tuning': False,
                                            'general.force_pagetype_topic': False,
                                            'general.force_reports': False,
                                            'general.force_sla_configuration': False,
                                            'general.force_views': False,
                                            'general.ignore_hard_limit': False,
                                            'general.ignore_soft_limit': False,
                                            'general.instant_reports': False,
                                            'general.logout': False,
                                            'general.manage_2fa': False,
                                            'general.message': False,
                                            'general.painter_options': False,
                                            'general.parent_child_topology': False,
                                            'general.publish_bookmark_list': False,
                                            'general.publish_custom_graph': False,
                                            'general.publish_custom_snapin': False,
                                            'general.publish_dashboards': False,
                                            'general.publish_dashboards_to_foreign_groups': False,
                                            'general.publish_dashboards_to_groups': False,
                                            'general.publish_forecast_graph': False,
                                            'general.publish_graph_collection': False,
                                            'general.publish_graph_tuning': False,
                                            'general.publish_pagetype_topic': False,
                                            'general.publish_reports': False,
                                            'general.publish_reports_to_foreign_groups': False,
                                            'general.publish_reports_to_groups': False,
                                            'general.publish_sla_configuration': False,
                                            'general.publish_stored_report': False,
                                            'general.publish_to_foreign_groups_bookmark_list': False,
                                            'general.publish_to_foreign_groups_custom_graph': False,
                                            'general.publish_to_foreign_groups_custom_snapin': False,
                                            'general.publish_to_foreign_groups_forecast_graph': False,
                                            'general.publish_to_foreign_groups_graph_collection': False,
                                            'general.publish_to_foreign_groups_graph_tuning': False,
                                            'general.publish_to_foreign_groups_pagetype_topic': False,
                                            'general.publish_to_foreign_groups_sla_configuration': False,
                                            'general.publish_to_groups_bookmark_list': False,
                                            'general.publish_to_groups_custom_graph': False,
                                            'general.publish_to_groups_custom_snapin': False,
                                            'general.publish_to_groups_forecast_graph': False,
                                            'general.publish_to_groups_graph_collection': False,
                                            'general.publish_to_groups_graph_tuning': False,
                                            'general.publish_to_groups_pagetype_topic': False,
                                            'general.publish_to_groups_sla_configuration': False,
                                            'general.publish_views': False,
                                            'general.publish_views_to_foreign_groups': False,
                                            'general.publish_views_to_groups': False,
                                            'general.reporting': False,
                                            'general.schedule_reports': False,
                                            'general.schedule_reports_all': False,
                                            'general.see_all': False,
                                            'general.see_availability': False,
                                            'general.see_crash_reports': False,
                                            'general.see_failed_notifications': False,
                                            'general.see_failed_notifications_24h': False,
                                            'general.see_sidebar': False,
                                            'general.see_stales_in_tactical_overview': False,
                                            'general.see_user_bookmark_list': False,
                                            'general.see_user_custom_graph': False,
                                            'general.see_user_custom_snapin': False,
                                            'general.see_user_dashboards': False,
                                            'general.see_user_forecast_graph': False,
                                            'general.see_user_graph_collection': False,
                                            'general.see_user_graph_tuning': False,
                                            'general.see_user_pagetype_topic': False,
                                            'general.see_user_reports': False,
                                            'general.see_user_sla_configuration': False,
                                            'general.see_user_stored_report': False,
                                            'general.see_user_views': False,
                                            'general.server_side_requests': False,
                                            'general.use': True,
                                            'general.view_option_columns': False,
                                            'general.view_option_refresh': False,
                                            'graph_collection.default': False,
                                            'icons_and_actions.action_menu': False,
                                            'icons_and_actions.agent_deployment': False,
                                            'icons_and_actions.aggregation_checks': False,
                                            'icons_and_actions.aggregations': False,
                                            'icons_and_actions.check_manpage': False,
                                            'icons_and_actions.check_period': False,
                                            'icons_and_actions.crashed_check': False,
                                            'icons_and_actions.custom_action': False,
                                            'icons_and_actions.deployment_status': False,
                                            'icons_and_actions.download_agent_output': False,
                                            'icons_and_actions.download_snmp_walk': False,
                                            'icons_and_actions.icon_image': False,
                                            'icons_and_actions.inventory': False,
                                            'icons_and_actions.logwatch': False,
                                            'icons_and_actions.mkeventd': False,
                                            'icons_and_actions.notes': False,
                                            'icons_and_actions.ntop_host': False,
                                            'icons_and_actions.parent_child_topology': False,
                                            'icons_and_actions.perfgraph': False,
                                            'icons_and_actions.prediction': False,
                                            'icons_and_actions.reschedule': False,
                                            'icons_and_actions.robotmk': False,
                                            'icons_and_actions.robotmk_error': False,
                                            'icons_and_actions.rule_editor': False,
                                            'icons_and_actions.stars': False,
                                            'icons_and_actions.status_acknowledged': False,
                                            'icons_and_actions.status_active_checks': False,
                                            'icons_and_actions.status_comments': False,
                                            'icons_and_actions.status_downtimes': False,
                                            'icons_and_actions.status_flapping': False,
                                            'icons_and_actions.status_notification_period': False,
                                            'icons_and_actions.status_notifications_enabled': False,
                                            'icons_and_actions.status_passive_checks': False,
                                            'icons_and_actions.status_service_period': False,
                                            'icons_and_actions.status_shadow': False,
                                            'icons_and_actions.status_stale': False,
                                            'icons_and_actions.wato': False,
                                            'mkeventd.actions': False,
                                            'mkeventd.activate': False,
                                            'mkeventd.archive_events_of_hosts': False,
                                            'mkeventd.changestate': False,
                                            'mkeventd.config': False,
                                            'mkeventd.delete': False,
                                            'mkeventd.edit': False,
                                            'mkeventd.see_in_tactical_overview': False,
                                            'mkeventd.seeall': False,
                                            'mkeventd.seeunrelated': False,
                                            'mkeventd.switchmode': False,
                                            'mkeventd.update': False,
                                            'mkeventd.update_comment': False,
                                            'mkeventd.update_contact': False,
                                            'nagvis.*_*_*': False,
                                            'nagvis.Map_delete': False,
                                            'nagvis.Map_delete_*': False,
                                            'nagvis.Map_edit': False,
                                            'nagvis.Map_edit_*': False,
                                            'nagvis.Map_view': False,
                                            'nagvis.Map_view_*': False,
                                            'nagvis.Rotation_view_*': False,
                                            'notification_plugin.asciimail': False,
                                            'notification_plugin.cisco_webex_teams': False,
                                            'notification_plugin.ilert': False,
                                            'notification_plugin.jira_issues': False,
                                            'notification_plugin.mail': False,
                                            'notification_plugin.mkeventd': False,
                                            'notification_plugin.opsgenie_issues': False,
                                            'notification_plugin.pagerduty': False,
                                            'notification_plugin.pushover': False,
                                            'notification_plugin.servicenow': False,
                                            'notification_plugin.signl4': False,
                                            'notification_plugin.slack': False,
                                            'notification_plugin.sms': False,
                                            'notification_plugin.sms_api': False,
                                            'notification_plugin.spectrum': False,
                                            'notification_plugin.victorops': False,
                                            'pagetype_topic.analyze': False,
                                            'pagetype_topic.applications': False,
                                            'pagetype_topic.bi': False,
                                            'pagetype_topic.events': False,
                                            'pagetype_topic.history': False,
                                            'pagetype_topic.inventory': False,
                                            'pagetype_topic.monitoring': False,
                                            'pagetype_topic.my_workplace': False,
                                            'pagetype_topic.network_statistics': False,
                                            'pagetype_topic.other': False,
                                            'pagetype_topic.overview': False,
                                            'pagetype_topic.problems': False,
                                            'report.bi_availability': False,
                                            'report.default': False,
                                            'report.host': False,
                                            'report.host_performance_graphs': False,
                                            'report.instant': False,
                                            'report.instant_availability': False,
                                            'report.instant_graph_collection': False,
                                            'report.instant_view': False,
                                            'report.service_availability': False,
                                            'sidesnap.admin_mini': False,
                                            'sidesnap.biaggr_groups': False,
                                            'sidesnap.biaggr_groups_tree': False,
                                            'sidesnap.bookmarks': False,
                                            'sidesnap.cmc_stats': False,
                                            'sidesnap.dashboards': False,
                                            'sidesnap.hostgroups': False,
                                            'sidesnap.master_control': False,
                                            'sidesnap.mkeventd_performance': False,
                                            'sidesnap.nagvis_maps': False,
                                            'sidesnap.performance': False,
                                            'sidesnap.reports': False,
                                            'sidesnap.search': False,
                                            'sidesnap.servicegroups': False,
                                            'sidesnap.sitestatus': False,
                                            'sidesnap.speedometer': False,
                                            'sidesnap.tactical_overview': False,
                                            'sidesnap.tag_tree': False,
                                            'sidesnap.time': False,
                                            'sidesnap.views': False,
                                            'sidesnap.wato_foldertree': False,
                                            'view.aggr_all': False,
                                            'view.aggr_all_api': False,
                                            'view.aggr_group': False,
                                            'view.aggr_host': False,
                                            'view.aggr_hostgroup_boxed': False,
                                            'view.aggr_hostnameaggrs': False,
                                            'view.aggr_hostproblems': False,
                                            'view.aggr_problems': False,
                                            'view.aggr_service': False,
                                            'view.aggr_single': False,
                                            'view.aggr_single_api': False,
                                            'view.aggr_singlehost': False,
                                            'view.aggr_singlehosts': False,
                                            'view.aggr_summary': False,
                                            'view.alerthandlers': False,
                                            'view.alertstats': False,
                                            'view.allhosts': False,
                                            'view.allhosts_deploy': False,
                                            'view.allservices': False,
                                            'view.api_downtimes': False,
                                            'view.bi_map_hover_host': False,
                                            'view.bi_map_hover_service': False,
                                            'view.cmk_servers': False,
                                            'view.cmk_sites': False,
                                            'view.cmk_sites_of_host': False,
                                            'view.comments': False,
                                            'view.comments_of_host': False,
                                            'view.comments_of_service': False,
                                            'view.contactnotifications': False,
                                            'view.crash_reports': False,
                                            'view.docker_containers': False,
                                            'view.docker_nodes': False,
                                            'view.downtime_history': False,
                                            'view.downtimes': False,
                                            'view.downtimes_of_host': False,
                                            'view.downtimes_of_service': False,
                                            'view.ec_event': False,
                                            'view.ec_event_mobile': False,
                                            'view.ec_events': False,
                                            'view.ec_events_mobile': False,
                                            'view.ec_events_of_host': False,
                                            'view.ec_events_of_monhost': False,
                                            'view.ec_history_of_event': False,
                                            'view.ec_history_of_host': False,
                                            'view.ec_history_recent': False,
                                            'view.ec_historyentry': False,
                                            'view.events': False,
                                            'view.events_dash': False,
                                            'view.failed_notifications': False,
                                            'view.host': False,
                                            'view.host_crit': False,
                                            'view.host_dt_hist': False,
                                            'view.host_export': False,
                                            'view.host_graphs': False,
                                            'view.host_ok': False,
                                            'view.host_pending': False,
                                            'view.host_unknown': False,
                                            'view.host_warn': False,
                                            'view.hostevents': False,
                                            'view.hostgroup': False,
                                            'view.hostgroup_down': False,
                                            'view.hostgroup_pend': False,
                                            'view.hostgroup_unreach': False,
                                            'view.hostgroup_up': False,
                                            'view.hostgroups': False,
                                            'view.hostgroupservices': False,
                                            'view.hostgroupservices_crit': False,
                                            'view.hostgroupservices_ok': False,
                                            'view.hostgroupservices_pend': False,
                                            'view.hostgroupservices_unknwn': False,
                                            'view.hostgroupservices_warn': False,
                                            'view.hostnotifications': False,
                                            'view.hostpnp': False,
                                            'view.hostproblems': False,
                                            'view.hostproblems_dash': False,
                                            'view.hosts': False,
                                            'view.hoststatus': False,
                                            'view.hostsvcevents': False,
                                            'view.hostsvcnotifications': False,
                                            'view.inv_host': False,
                                            'view.inv_host_history': False,
                                            'view.inv_hosts_cpu': False,
                                            'view.inv_hosts_ports': False,
                                            'view.invbackplane_of_host': False,
                                            'view.invbackplane_search': False,
                                            'view.invchassis_of_host': False,
                                            'view.invchassis_search': False,
                                            'view.invcmksites_of_host': False,
                                            'view.invcmksites_search': False,
                                            'view.invcmkversions_of_host': False,
                                            'view.invcmkversions_search': False,
                                            'view.invcontainer_of_host': False,
                                            'view.invcontainer_search': False,
                                            'view.invdockercontainers_of_host': False,
                                            'view.invdockercontainers_search': False,
                                            'view.invdockerimages_of_host': False,
                                            'view.invdockerimages_search': False,
                                            'view.invfan_of_host': False,
                                            'view.invfan_search': False,
                                            'view.invibmmqchannels_of_host': False,
                                            'view.invibmmqchannels_search': False,
                                            'view.invibmmqmanagers_of_host': False,
                                            'view.invibmmqmanagers_search': False,
                                            'view.invibmmqqueues_of_host': False,
                                            'view.invibmmqqueues_search': False,
                                            'view.invinterface_of_host': False,
                                            'view.invinterface_search': False,
                                            'view.invkernelconfig_of_host': False,
                                            'view.invkernelconfig_search': False,
                                            'view.invmodule_of_host': False,
                                            'view.invmodule_search': False,
                                            'view.invoradataguardstats_of_host': False,
                                            'view.invoradataguardstats_search': False,
                                            'view.invorainstance_of_host': False,
                                            'view.invorainstance_search': False,
                                            'view.invorapga_of_host': False,
                                            'view.invorapga_search': False,
                                            'view.invorarecoveryarea_of_host': False,
                                            'view.invorarecoveryarea_search': False,
                                            'view.invorasga_of_host': False,
                                            'view.invorasga_search': False,
                                            'view.invorasystemparameter_of_host': False,
                                            'view.invorasystemparameter_search': False,
                                            'view.invoratablespace_of_host': False,
                                            'view.invoratablespace_search': False,
                                            'view.invother_of_host': False,
                                            'view.invother_search': False,
                                            'view.invpsu_of_host': False,
                                            'view.invpsu_search': False,
                                            'view.invsensor_of_host': False,
                                            'view.invsensor_search': False,
                                            'view.invstack_of_host': False,
                                            'view.invstack_search': False,
                                            'view.invswpac_of_host': False,
                                            'view.invswpac_search': False,
                                            'view.invtunnels_of_host': False,
                                            'view.invtunnels_search': False,
                                            'view.invunknown_of_host': False,
                                            'view.invunknown_search': False,
                                            'view.logfile': False,
                                            'view.mobile_contactnotifications': False,
                                            'view.mobile_events': False,
                                            'view.mobile_host': False,
                                            'view.mobile_hostproblems': False,
                                            'view.mobile_hostproblems_unack': False,
                                            'view.mobile_hoststatus': False,
                                            'view.mobile_hostsvcevents': False,
                                            'view.mobile_hostsvcnotifications': False,
                                            'view.mobile_notifications': False,
                                            'view.mobile_searchhost': False,
                                            'view.mobile_searchsvc': False,
                                            'view.mobile_service': False,
                                            'view.mobile_svcevents': False,
                                            'view.mobile_svcnotifications': False,
                                            'view.mobile_svcproblems': False,
                                            'view.mobile_svcproblems_unack': False,
                                            'view.nagstamon_hosts': False,
                                            'view.nagstamon_svc': False,
                                            'view.notifications': False,
                                            'view.ntop_interfaces': False,
                                            'view.pending_discovery': False,
                                            'view.pendingsvc': False,
                                            'view.perf_matrix': False,
                                            'view.perf_matrix_search': False,
                                            'view.problemsofhost': False,
                                            'view.recentsvc': False,
                                            'view.searchhost': False,
                                            'view.searchpnp': False,
                                            'view.searchsvc': False,
                                            'view.service': False,
                                            'view.service_check_durations': False,
                                            'view.service_graphs': False,
                                            'view.servicedesc': False,
                                            'view.servicegroup': False,
                                            'view.sitehosts': False,
                                            'view.sitesvcs': False,
                                            'view.sitesvcs_crit': False,
                                            'view.sitesvcs_ok': False,
                                            'view.sitesvcs_pend': False,
                                            'view.sitesvcs_unknwn': False,
                                            'view.sitesvcs_warn': False,
                                            'view.stale_hosts': False,
                                            'view.svc_dt_hist': False,
                                            'view.svcevents': False,
                                            'view.svcgroups': False,
                                            'view.svcnotifications': False,
                                            'view.svcproblems': False,
                                            'view.svcproblems_dash': False,
                                            'view.topology_filters': False,
                                            'view.topology_hover_host': False,
                                            'view.uncheckedsvc': False,
                                            'view.unmonitored_services': False,
                                            'view.vpshere_vms': False,
                                            'view.vsphere_servers': False,
                                            'wato.activate': False,
                                            'wato.activateforeign': False,
                                            'wato.add_or_modify_executables': False,
                                            'wato.agent_deploy_custom_files': False,
                                            'wato.agent_deployment': False,
                                            'wato.agents': False,
                                            'wato.alert_handlers': False,
                                            'wato.all_folders': False,
                                            'wato.analyze_config': False,
                                            'wato.api_allowed': False,
                                            'wato.auditlog': False,
                                            'wato.automation': False,
                                            'wato.backups': False,
                                            'wato.bake_agents': False,
                                            'wato.bi_admin': False,
                                            'wato.bi_rules': False,
                                            'wato.check_plugins': False,
                                            'wato.clear_auditlog': False,
                                            'wato.clone_hosts': False,
                                            'wato.custom_attributes': False,
                                            'wato.dcd_connections': False,
                                            'wato.diag_host': False,
                                            'wato.diagnostics': False,
                                            'wato.download_agent_output': False,
                                            'wato.download_agents': True,
                                            'wato.download_all_agents': True,
                                            'wato.edit': False,
                                            'wato.edit_all_passwords': False,
                                            'wato.edit_all_predefined_conditions': False,
                                            'wato.edit_folders': False,
                                            'wato.edit_hosts': False,
                                            'wato.global': False,
                                            'wato.groups': False,
                                            'wato.hosts': False,
                                            'wato.hosttags': False,
                                            'wato.icons': False,
                                            'wato.influxdb_connections': False,
                                            'wato.license_usage': False,
                                            'wato.manage_folders': False,
                                            'wato.manage_hosts': False,
                                            'wato.manage_mkps': False,
                                            'wato.mkps': False,
                                            'wato.move_hosts': False,
                                            'wato.notifications': False,
                                            'wato.parentscan': False,
                                            'wato.passwords': False,
                                            'wato.pattern_editor': False,
                                            'wato.random_hosts': False,
                                            'wato.rename_hosts': False,
                                            'wato.rulesets': False,
                                            'wato.see_all_folders': False,
                                            'wato.seeall': False,
                                            'wato.service_discovery_to_ignored': False,
                                            'wato.service_discovery_to_monitored': False,
                                            'wato.service_discovery_to_removed': False,
                                            'wato.service_discovery_to_undecided': False,
                                            'wato.services': False,
                                            'wato.set_read_only': False,
                                            'wato.show_last_user_activity': False,
                                            'wato.sign_agents': False,
                                            'wato.sites': False,
                                            'wato.snapshots': False,
                                            'wato.submit_license_usage': False,
                                            'wato.timeperiods': False,
                                            'wato.update_dns_cache': False,
                                            'wato.use': False,
                                            'wato.users': False}},

In order to put it in the right place, please add a comma "," before the "})".

Agent Registration (Pairing) for TLS Encryption

For a user to be able to do the cmk-agent-ctl register, which is needed to enable the TLS encryption (available from 2.1.0 onwards), you have to add the following rights (internal name "general.agent_pairing") to their role.

Agent pairing
Read access to all hosts and folders
Write access to all hosts and folders

In the end, the whole file should look like this: