[Feature]: Permissions models and rights to view/execute patch/even reboot machine
What is the installation method of your PatchMon server?
Proxmox-community script
What is the version of your PatchMon server?
2.0.2
Briefly describe the feature
Increase granularity on login permissions for different user abilities, view only, patch, reboot
Detailed description
Request for new feature combined with streamline of permissions.
I am wondering if its possible to develop some kind of role-based login, eg "view only" or "allow patch"
Along with that could we introduce a button or workflow to be able to restart a machine that requires a reboot - currently more relevant to Linux but equally applicable to growth of the Windows client.
Seems to me that anybody choosing to deploy Patchmon understands that the agent/remote console has the privileges to perform an update so why wouldn't it be applicable to have the privileges to allow a reboot? Per above, the defining factor would be some kind of RBAC role - not every login would/should be allowed.
Close if I am being stupid. As always, thank you for Patchmon!
Why is this useful?
Continous improvement of the Patchmon interface which is awesome.
6 Comments
Would love to see Role Based Access Controls (RBAC), this would be extremely useful in larger environments
I would love the ability to reboot/schedule a reboot without having to SSH to every machine first. "apt autoremove" would be helpful as well.
Yes, and dont forget "apt autoremove --purge"
I would love the ability to reboot/schedule a reboot without having to SSH to every machine first. "apt autoremove" would be helpful as well.
That would be great. I have a host that still reports to Patchmon and installs updates, that is in a remote net, which I can't ssh to becaus he provides the VPN service. So a "Reboot" Button would help me big time!
I would love the ability to reboot/schedule a reboot without having to SSH to every machine first.
"apt autoremove" would be helpful as well.
Hi.
Okay, I will implement this in a future version as I can see how it can be beneficial.
In larger environments, this is also necessary to ensure that certain admin groups can only access their own system groups.