Required role permissions needed to use the Agent Bakery

For using the Agent Bakery, you need at least three permissions. If you enable only "Bake agents" and "Sign agents," you won't be able to use the bake or sign button.


Table of Contents

Getting Started

Background information regarding this subject is available on our:


This is because you need the additional role "Configuration of agent updates." With these four roles, you should be able to bake and sign the agent in the Agent Bakery.

Agent bakery Deploy plugin that updates agent automatically. Interval check 1 hours.

Why we designed this like that:

Permission nameDescription
Manage Monitoring AgentsWith these permissions, you're able to see the available agents
Configuration of agent updatesThis permission allows complete control of the automatic agent updates. But not to release the agents.
Bake Agents and Sign AgentsBake and sign the new agents. With these permissions, you're able to release the agents.

Initially, we thought that "Configuration of agent updates" was the default role for dealing with the agents. 

In the future, we might change this concept!

Attention: in 2.1, "Bake Agents and Sign Agents" becomes two options: "Bake agents" and "Sign agents," which must be set to "Yes," respectively!