Appendix E. Permissions Required to Provision Hosts
The following list provides an overview of the permissions a non-admin user requires to provision hosts.
Resource name | Permissions | Additional details |
---|---|---|
Activation Keys | view_activation_keys | |
Ansible role | view_ansible_roles | Required if Ansible is used. |
Architecture | view_architectures | |
Compute profile | view_compute_profiles | |
Compute resource | view_compute_resources, create_compute_resources, destroy_compute_resources, power_compute_resources | Required to provision bare metal hosts. |
view_compute_resources_vms, create_compute_resources_vms, destroy_compute_resources_vms, power_compute_resources_vms | Required to provision virtual machines. | |
Content Views | view_content_views | |
Domain | view_domains | |
Environment | view_environments | |
Host | view_hosts, create_hosts, edit_hosts, destroy_hosts, build_hosts, power_hosts, play_roles_on_host | |
view_discovered_hosts, submit_discovered_hosts, auto_provision_discovered_hosts, provision_discovered_hosts, edit_discovered_hosts, destroy_discovered_hosts | Required if the Discovery service is enabled. | |
Hostgroup | view_hostgroups, create_hostgroups, edit_hostgroups, play_roles_on_hostgroup | |
Image | view_images | |
Lifecycle Environment | view_lifecycle_environments | |
Location | view_locations | |
Medium | view_media | |
Operatingsystem | view_operatingsystems | |
Organization | view_organizations | |
Parameter | view_params, create_params, edit_params, destroy_params | |
Product and Repositories | view_products | |
Provisioning template | view_provisioning_templates | |
Ptable | view_ptables | |
Capsule | view_smart_proxies, view_smart_proxies_puppetca | |
view_openscap_proxies | Required if the OpenSCAP plug-in is enabled. | |
Subnet | view_subnets |
Additional resources
- Creating a Role in Administering Red Hat Satellite
- Adding Permissions to a Role in Administering Red Hat Satellite
- Assigning Roles to a User in Administering Red Hat Satellite