Required role permissions needed to use the Agent Bakery

Owned by Anastasios Thomaidis
Last updated: Oct 14, 2024 by Matthew Hierholzer

For using the Agent Bakery with a normal monitoring user, you need four permissions. If you enable only "Bake agents" and "Sign agents," you won't be able to use the bake or sign button.

For enabling the normal monitoring user to use the Agent Bakery to bake and sign agents, you need at least four permissions. If you enable only "Bake agents" and "Sign agents," you won't be able to use the bake or sign button.

LAST TESTED ON CHECKMK 2.3.0P1

Table of Contents

Getting Started

Background information regarding this subject is available on our:

Permissions

In this guide, we will show you which are the permissions you need to modify in order to allow the normal monitoring user to use the agent bakery to bake and sign agents.

Agent bakery Deploy plugin that updates agent automatically. Interval check 1 hours.


Why we designed this like that:

Permission nameDescriptionAlready available for role
Use WATOThis permission allows users to use Setup - Checkmk's Web Administration Tool. Without this permission all references to Setup (buttons, links, snap-ins) will be invisible.Normal monitoring user
Make changes, perform actionsThis permission is needed in order to make any changes or perform any actions at all. Without this permission, the user is only able to view data, and that only in modules he has explicit permissions for.Normal monitoring user
Manage monitoring agentsManage customized packaged monitoring agents for Linux, Windows, and other operating systems.
Bake agentsBake new agent packages for Linux, Windows, and other operating systems.
Sign agentsSign baked agent packages for Linux, Windows, and other operating systems.
Configuration of agent updatesThis permission allows full control of the automatic agent updates.

The first two permissions from the table are already enabled for the normal monitoring user. If you somehow need to create a more restrictive user (based on the guest role) that needs to bake and sign agents, you need to assign all the six permissions to your guest user.