I want to create a user in my FreeIPA domain that will be able to automatically add and delete a host created (or deleted) by Foreman. I found 2 permissions:
- "System: Add Host" and
- "System: Enroll a Host".
What is their difference?
According to RHEL7 documentation host-add
[1] sets a DNS entry in the IPAs DNS server.
Enrolling is linked to the ipa-client-install
and should be what you need.
Depending on your setup, you might need both, since host-add
can be involved during the enrolling of new clients. In case your IPA server does not do DNS, this might not be the case.
Host Add
is for sure not enough. But I assume you need both, when FreeIPA is your DNS server and you want to have working DNS entries.