For enabling the normal monitoring user to use the Agent Bakery to bake and sign agents, you need at least four permissions. If you enable only "Bake agents" and "Sign agents," you won't be able to use the bake or sign button.

LAST TESTED ON CHECKMK 2.3.0P1

Table of Contents

Getting Started

Background information regarding this subject is available on our:

Permissions

In this guide, we will show you which are the permissions you need to modify in order to allow the normal monitoring user to use the agent bakery to bake and sign agents.

Agent bakery Deploy plugin that updates agent automatically. Interval check 1 hours.

Why we designed this like that:

Permission name	Description	Already available for role
Use WATO	This permission allows users to use Setup - Checkmk's Web Administration Tool. Without this permission all references to Setup (buttons, links, snap-ins) will be invisible.	Normal monitoring user
Make changes, perform actions	This permission is needed in order to make any changes or perform any actions at all. Without this permission, the user is only able to view data, and that only in modules he has explicit permissions for.	Normal monitoring user
Manage monitoring agents	Manage customized packaged monitoring agents for Linux, Windows, and other operating systems.
Bake agents	Bake new agent packages for Linux, Windows, and other operating systems.
Sign agents	Sign baked agent packages for Linux, Windows, and other operating systems.
Configuration of agent updates	This permission allows full control of the automatic agent updates.

The first two permissions from the table are already enabled for the normal monitoring user. If you somehow need to create a more restrictive user (based on the guest role) that needs to bake and sign agents, you need to assign all the six permissions to your guest user.

Related articles

Page:

Required role permissions needed to use the Agent Bakery
Page:

Changing a CA SSL certificate for the Agent Bakery
Page:

How to upload a license report
Page:

How-to monitor TCP/UDP ports
Page:

How to navigate through the customer portal

Browser not supported