Custom role permissions

Foreman 3.12
Puppet 7.33
RHEL8

Trying to create a custom operator role that currently has these filters set:

but when a user with that role tries to modify a parameter they are allowed to change, they get this on submit:

We’ve added the view_operating systems filter but no change. What right is missing that makes the operating system be blank ? For an admin user, the operatingsystem is filled in.

These systems are all Puppet managed hosts.

Additional info that might be relevant - we mark new systems as “managed” by Foreman after they check in via Puppet so the Puppet certificates can be removed properly when the system is removed from Foreman.

If there is a better forum for help with this or somewhere to pay for assistance with these roles please let me know.

I’m sorry I don’t have the solution, but I quickly tested this with user with the manager role and it seems to work here. Make sure there the OS linked to the selected architecture. Given your host is managed, there’s more things that are required, such as the install media or partition table. When you switch the host to managed, Foreman treats it as something it can provision, hence additional information is required. The actual switch skips the validations, which is why it allows you to do so.

Perhaps you should keep the host unmanaged and use webhooks to do the puppet certificates orchestration (never tried myself)

The problem is that the role can’t even pick an OS - the list is blank. An admin role works without issues so it seems all of the required information is there but the custom role can’t see it for some reason.

I’ve also tried cranking up the debug log level to see if there is an error or some more detail on why but nothing useful seems to be logged.

Just started playing with this my self this is what i did.


and it allows the user to select to os.

You need to add >Content Views>view_content_views

Unfortunately I’m not using Katello so I don’t have some of those options.

@dsexton18 Your post did help me after all - I built a new Role out using yours as a guide - attached is a screenshot of what worked for me. Thanks for the help!