Chapter 10. Creating and managing roles

Procedure

1. In the Satellite web UI, navigate to Administer > Roles.
2. Click Create Role.
3. Provide a Name for the role.
4. Click Submit to save your new role.

Procedure

1. In the Satellite web UI, navigate to Administer > Roles and select Clone from the drop-down menu to the right of the required role.
2. Provide a Name for the role.
3. Click Submit to clone the role.
4. Click the name of the cloned role and navigate to Filters.
5. Edit the permissions as required.
6. Click Submit to save your new role.

Procedure

1. In the Satellite web UI, navigate to Administer > Roles.
2. Select Add Filter from the drop-down list to the right of the required role.
3. Select the Resource type from the drop-down list. The (Miscellaneous) group gathers permissions that are not associated with any resource group.
4. Click the permissions you want to select from the Permission list.
5. Depending on the Resource type selected, you can select or deselect the Unlimited and Override checkbox. The Unlimited checkbox is selected by default, which means that the permission is applied on all resources of the selected type. When you disable the Unlimited checkbox, the Search field activates. In this field you can specify further filtering with use of the Satellite search syntax. For more information, see Section 10.10, “Granular permission filtering”. When you enable the Override checkbox, you can add additional locations and organizations to allow the role to access the resource type in the additional locations and organizations; you can also remove an already associated location and organization from the resource type to restrict access.
6. Click Next.
7. Click Submit to save changes.

Procedure

1. List all available permissions:

   $ hammer filter available-permissions

   Copy to Clipboard Toggle word wrap

2. Add permissions to a role:

   $ hammer filter create \
   --permission-ids My_Permission_ID_1,My_Permission_ID_2 \
   --role My_Role_Name

   Copy to Clipboard Toggle word wrap

   For more information about roles and permissions parameters, enter the hammer role --help and hammer filter --help commands.

Procedure

1. In the Satellite web UI, navigate to Administer > Roles.

2. Click Filters to the right of the required role to get to the Filters page.

   The Filters page contains a table of permissions assigned to a role grouped by the resource type. It is also possible to generate a complete table of permissions and actions that you can use on your Satellite system. For more information, see Section 10.7, “Creating a complete permission table”.

Procedure

1. Start the Satellite console:

   # foreman-rake console

   Copy to Clipboard Toggle word wrap

2. Insert the following code into the console:

   f = File.open('/tmp/table.html', 'w')
   
   result = Foreman::AccessControl.permissions {|a,b| a.security_block <=> b.security_block}.collect do |p|
         actions = p.actions.collect { |a| "<li>#{a}</li>" }
         "<tr><td>#{p.name}</td><td><ul>#{actions.join('')}</ul></td><td>#{p.resource_type}</td></tr>"
   end.join("\n")
   
   f.write(result)

   Copy to Clipboard Toggle word wrap

   The above syntax creates a table of permissions and saves it to the /tmp/table.html file.

3. Press Ctrl + D to exit the Satellite console.

4. Insert the following text at the first line of /tmp/table.html:

   <table border="1"><tr><td>Permission name</td><td>Actions</td><td>Resource type</td></tr>

   Copy to Clipboard Toggle word wrap

5. Append the following text at the end of /tmp/table.html:

   </table>

   Copy to Clipboard Toggle word wrap
6. Open /tmp/table.html in a web browser to view the table.

Procedure

1. In the Satellite web UI, navigate to Administer > Roles.
2. Select Delete from the drop-down list to the right of the role to be deleted.
3. Click Confirm to delete the role.