Chapter 1. Introducing remote host configuration and management
Remote host configuration (rhc) is a powerful tool that enables the following capabilities:
- Easy registration. With the rhc client, you can register systems to Red Hat Subscription Management (RHSM) and Red Hat Insights for Red Hat Enterprise Linux.
- Remediations and Tasks from Insights for Red Hat Enterprise Linux. When you connect systems to Insights for Red Hat Enterprise Linux with the rhc client, you can manage the end-to-end experience of finding and fixing issues. Registered systems can directly use tasks and remediation playbooks that are automatically generated from remediation plans and executed from within the Insights Automation Toolkit.
Supported configurations for remote host configuration
Use the rhc client for systems that connect directly to Red Hat services. To register systems with Red Hat Satellite or Capsule, see the following:
- Fully supported by RHEL 8.6 and later, including RHEL 9 and RHEL 10.
1.1. Remote host configuration components
The remote host configuration service includes the following two main components:
- The remote host configuration client (a client-side daemon)
- The remote host configuration manager (a server-side service)
The remote configuration client
The rhc client is preinstalled with all Red Hat Enterprise Linux (RHEL) 8.6 and later installations, with the exception of minimal installations. The rhc client consists of the following utility programs:
-
The
yggdrasil
(rhcd
on version RHEL 9 and earlier) daemon runs on the system and listens for messages from the Red Hat Hybrid Cloud Console. On properly configured systems, theyggdrasil
daemon can receive and execute playbooks that are generated by Red Hat Insights remediation plans. -
The
rhc
command-line utility for RHEL.
The remote host configuration manager
You can use the remote host configuration manager to enable or disable Insights for Red Hat Enterprise Linux remediation for systems that are connected using the rhc client and actively running the yggdrasil
daemon.
1.2. User Access settings in the Red Hat Hybrid Cloud Console
User Access is the Red Hat implementation of role-based access control (RBAC). Your Organization Administrator uses User Access to configure what users can see and do on the Red Hat Hybrid Cloud Console (the console):
- Control user access by organizing roles instead of assigning permissions individually to users.
- Create groups that include roles and their corresponding permissions.
- Assign users to these groups, allowing them to inherit the permissions associated with their group’s roles.
1.2.1. Predefined User Access groups and roles
To make groups and roles easier to manage, Red Hat provides two predefined groups and a set of predefined roles:
Predefined groups
The Default access group contains all users in your organization. Many predefined roles are assigned to this group. It is automatically updated by Red Hat.
NoteIf the Organization Administrator makes changes to the Default access group its name changes to Custom default access group and it is no longer updated by Red Hat.
The Default admin access group contains only users who have Organization Administrator permissions. This group is automatically maintained and users and roles in this group cannot be changed.
On the Hybrid Cloud Console navigate to Red Hat Hybrid Cloud Console > the Settings icon (⚙) > Identity & Access Management > User Access > Groups to see the current groups in your account. This view is limited to the Organization Administrator.
Predefined roles assigned to groups
The Default access group contains many of the predefined roles. Because all users in your organization are members of the Default access group, they inherit all permissions assigned to that group.
The Default admin access group includes many (but not all) predefined roles that provide update and delete permissions. The roles in this group usually include administrator in their name.
On the Hybrid Cloud Console navigate to Red Hat Hybrid Cloud Console > the Settings icon (⚙) > Identity & Access Management > User Access > Roles to see the current roles in your account. You can see how many groups each role is assigned to. This view is limited to the Organization Administrator.
1.2.2. Access permissions
The Prerequisites for each procedure list which predefined role provides the permissions you must have. As a user, you can navigate to Red Hat Hybrid Cloud Console > the Settings icon (⚙) > My User Access to view the roles and application permissions currently inherited by you.
If you try to access Insights for Red Hat Enterprise Linux features and see a message that you do not have permission to perform this action, you must obtain additional permissions. The Organization Administrator or the User Access administrator for your organization configures those permissions.
Use the Red Hat Hybrid Cloud Console Virtual Assistant to ask "Contact my Organization Administrator". The assistant sends an email to the Organization Administrator on your behalf.
Additional resources
For more information about user access and permissions, see User Access Configuration Guide for Role-based Access Control (RBAC).
1.2.3. User Access roles for remote host configuration and management
There are several User Access roles that are relevant for Red Hat Insights for Red Hat Enterprise Linux users. These roles determine if an Insights user can simply view settings or change them, and use remediation features.
User Access roles for using the Remote Host Configuration Manager in the Insights for Red Hat Enterprise Linux web console
- RHC administrator. Members in a group with this role can perform any operations in the rhc manager.
- RHC user. This is a default permission for all users on your organization’s Red Hat Hybrid Cloud Console account, allowing anyone to see the current status of the configuration.
User Access roles for using remediation features in the Insights for Red Hat Enterprise Linux web console
- Remediations administrator. Members in a group with this role can perform any available operation against any remediations resource, including direct remediations.
- Remediations user. Members in a group with this role can create, view, update, and delete operations against any remediations resource. This is a default permission given to all Hybrid Cloud Console users on your account.