User only update package not install new one

Support
#1

Hello,

how settings i must set by the “Roles” that a user can ony update installed packages and not can install new packages with the web gui.

Foreman Version: 3.3.1

Thanks for help.

#2

Hi @Slings

Package actions via Katello-agent require the edit_hosts permission.
Package actions via remote execution require create_job_invocations.

Unfortunately, there isn’t any more granularity than that – if a user can update packages on a content host, they can also install packages.

#3

Thanks for the information.