PDA

View Full Version : SUSE Manager 3.1: access rights for bootstrapping via GUI



timstein
20-Jul-2017, 07:41
Hello,

This is about SUSE Manager 3.1.

I知 trying to figure out what rights are needed for a user to be able to bootstrap systems via the web interface. Actually I知 always ending up setting the admin role "Organization Administrator". In any other combination of access rights the menu item "Systems -> Bootstrapping" is missing.
Is this by design? Am I missing something? :confused: IMHO needing rights as organizational administrator might be overkill just for bootstrapping a system.

Thanks and best regards
Tim

kwk
21-Jul-2017, 06:54
Bringing new systems under control of the organization belongs to the org admin. Who else would be in a suitable role ? What would you suggest ?

timstein
21-Jul-2017, 08:52
From a security point of view I can fully agree with this aspect.

In this special case which I知 asking for the guys who provision the systems are also doing the boot-strapping but they should not be able to do administrative tasks of an org admin. Whoever, I think this has to be resolved in an organizational way and not technically.

Thanks for your feedback!