Creating a role which can only run/create jobs

Problem:
Hi there,

I’ve created the below user role which should only be able to create/run jobs on remote hosts. I’ve noticed that when the below filters are applied to the role and a user assigned with this role logs in, there’s no Run job button on the Job invocations page. However when I view a host with the same user I can click on Schedule job and it brings me to the job creation page.

Am I missing something?

Foreman and Proxy versions:
foreman: 3.7.0

Foreman and Proxy plugin versions:
foreman-tasks 8.1.1
foreman_puppet 6.0.0
foreman_remote_execution 10.0.5
katello 4.9.1

Distribution and version:
Rocky Linux release 8.8 (Green Obsidian)

Hi,
I don’t really see anything missing.

That’s odd, this should be controlled purely by the create_job_invocations permission.

This button currently doesn’t check permissions at all, we’re in the process of fixing that and the job wizard doesn’t exactly check them either. Iirc you can enter the page, but when you submit it might not be accepted if you don’t have the necessary permissions. Can the user fill the form and submit it?

On a side note, why not use the built in remote execution roles?

1 Like

I did try that first but had the same issue where there’s no button showing.

Yes, I can go through the form and submit/run the job on my remote hosts.

I checked all available default roles and none of them show the button. The only way to get it to pop up is by making the user an administrator. Should I open up a ticket for this? This seems like bug as you mentioned it should purely be controlled by the create_job_invocations permission.

1 Like

Please do