Permissions for sync from an upstream Katello server

Support
1

Hello,

Problem:
On the Katello, in the “CDN Configuration” tab, it is requested to fill in the credentials.
image

Are there specific permissions without being admin to be able to synchronize from an upstream Katello?
I can’t find the inter-sync server related documentation regarding these permissions.

Expected outcome:
Use an account without administrator rights for synchronization.

Foreman and Proxy versions:
katello-4.3.1-1.el8.noarch
foreman-3.1.2-2.el8.noarch

Foreman and Proxy plugin versions:
katello-4.3.1-1.el8.noarch
foreman-3.1.2-2.el8.noarch

Distribution and version:
Red Hat Enterprise Linux release 8.5 (Ootpa)

1 Like
2

You should have a user with viewing permissions for lifecycle environments, content views, products and repositories. The user should also belong to the organization that the environment belongs to.
Those should be sufficient permissions to sync from the server.

3

I just checked. You should be able to connect and sync with the following user permissions

  1. View Organization
  2. Edit Organization (to download the debug certificate)
  3. View Content Views
  4. View Lifecycle Environments
  5. View Products.

Will check with @Lennonka to document this :slight_smile:

2 Likes
4

Hi @Partha_Aji and @sajha

Thanks, I confirm it works.
I think it’s useful to indicate in the documentation because it’s a good security practice :slight_smile: