Chapter 3. Using token-based service accounts with remediation plans

Procedure

1. In the Red Hat Hybrid Cloud Console, navigate to Red Hat Hybrid Cloud Console > the Settings icon (⚙) > Service Accounts.

2. Create a token-based service account, or select an existing service account. For more information about creating service accounts, see Creating a service account.

   Important

   If you create a new service account, make sure to save the Client ID and Client secret to a safe location. If you select an existing service account, ensure that you have access to the Client ID and Client secret.

3. Create a User Access group to associate to the service account, or assign the service account to an existing User Access group that has the required permissions. For more information about creating User Access groups, see Managing group access with roles and members.

4. Assign the following permissions to the group, if the group does not already have them. For more information about how to add roles and permissions to a User Access group, see Adding a role to a group.

   • inventory:hosts:read (included in the Inventory Hosts viewer role)
   • patch:*:read* (included in the Patch viewer role)

   • remediations:remediation:read and playbook-dispatcher:run:read (included in the Remediations User role)

     Note

     You can also grant the RHEL viewer role to the service account in the User Access group. The RHEL viewer role includes the correct permissions for inventory:hosts:read and remediations:remediation:read.

     For more information about assigning a service account to a User Access group, see Adding service accounts to a User Access group.

     Note

     If your organization uses Workspaces, ensure that your User Access group has the necessary permissions for full visibility into your inventory in AAP. For more information about workspaces, see Workspaces.

Procedure

1. Create a new credential in AAP. The Create credential screen displays. For more information about how to create and configure credentials in AAP, see Creating Red Hat Insights credentials.
2. In the Credential Type drop-down menu, select Insights as the credential type.
3. Paste the Client ID and Client secret for the service account into the respective fields in the Type Details section.
4. Click Create credential.