delegation_of_authority [NethServer Wiki]

Is this Nethserver module helpful to you?
Please consider donating to the author

Thank you kindly!

2019/03/04 11:32 · HF

Available for NS7 and NS6

nethserver-delegation is a rpm made to delegate the access to the server-manager or the sudo permissions to simple users or groups. Once you delegate all panels or the full sudo permissions, then the users become like root.

You must trust them !

This RPM is needed only for NethGui, for cockpit this delegation has been introduced inside the core system

Remind them the three rules of an administrator

1) Respect the privacy of others.
2) Think before you type.
3) With great power comes great responsibility.

Maybe you do not need my module, any user who is a member of the group domain admins (or administrators), is like root, granted to use all panels. For those who are members of the group managers, they are granted to the management section of the server-manager. If these groups do not exist you must create them. See the documentation

Maintainer

Stephane de Labrusse at stephdl@de-labrusse.fr

1-You need to install my repository, see how to do it

2-You can install nethserver-delegation

yum install nethserver-delegation

* for ns6

Go to the User or the group panel, you will find a new tab 'Delegation of authority'

* for ns7

Go to the Delegation of authority in the server-manager, you will find a specific panel in the management section. You can decide what permission to delegate

* Sudo power

You can give the sudo power to a user or a group. If no commands are given, then there is no sudo restriction. You must give the correct path to the command (eg:/usr/bin/ls)

Delegation of panels

You can grant permissions for a user or a group to the server-manager. Each module must be allowed, else you can delegate all panels. If you use the radio button 'Delegate all panels', then the future panels (not yet installed) will be also granted.

As a known issue, the Dashboard cannot be delegated yet, the code of the core must be changed.