Chapter 9. Creating and managing roles

Procedure

1. In the Satellite web UI, navigate to Administer > Roles.
2. Click Create Role.
3. Provide a Name for the role.
4. Click Submit to save your new role.

Procedure

1. In the Satellite web UI, navigate to Administer > Roles and select Clone from the drop-down menu to the right of the required role.
2. Provide a Name for the role.
3. Click Submit to clone the role.
4. Click the name of the cloned role and navigate to Filters.
5. Edit the permissions as required.
6. Click Submit to save your new role.

Procedure

1. In the Satellite web UI, navigate to Administer > Roles.
2. Select Add Filter from the drop-down list to the right of the required role.
3. Select the Resource type from the drop-down list. The (Miscellaneous) group gathers permissions that are not associated with any resource group.
4. Click the permissions you want to select from the Permission list.
5. Click Next.
6. Click Submit to save changes.

Procedure

1. List all available permissions:

   $ hammer filter available-permissions

2. Add permissions to a role:

   $ hammer filter create \
   --permission-ids My_Permission_ID_1,My_Permission_ID_2 \
   --role My_Role_Name

   For more information about roles and permissions parameters, enter the hammer role --help and hammer filter --help commands.

Procedure

1. In the Satellite web UI, navigate to Administer > Roles.

2. Click Filters to the right of the required role to get to the Filters page.

   The Filters page contains a table of permissions assigned to a role grouped by the resource type. It is also possible to generate a complete table of permissions and actions that you can use on your Satellite system. For more information, see Section 9.7, “Creating a complete permission table”.

Procedure

1. Start the Satellite console:

   # foreman-rake console

2. Insert the following code into the console:

   f = File.open('/tmp/table.html', 'w')
   
   result = Foreman::AccessControl.permissions {|a,b| a.security_block <=> b.security_block}.collect do |p|
         actions = p.actions.collect { |a| "<li>#{a}</li>" }
         "<tr><td>#{p.name}</td><td><ul>#{actions.join('')}</ul></td><td>#{p.resource_type}</td></tr>"
   end.join("\n")
   
   f.write("<table border=\"1\"><tr><td>Permission name</td><td>Actions</td><td>Resource type</td></tr>\n")
   f.write(result)
   f.write("</table>\n")

   The above syntax creates a table of permissions and saves it to the /tmp/table.html file.

3. Press Ctrl + D to exit the Satellite console.
4. Open /tmp/table.html in a web browser to view the table.

Procedure

1. In the Satellite web UI, navigate to Administer > Roles.
2. Select Delete from the drop-down list to the right of the role to be deleted.
3. Click Confirm to delete the role.