Questions tagged [rbac]
The rbac tag has no usage guidance.
0
votes
1answer
42 views
How to grant a Service Principal access to AKS API when RBAC and AAD integration are activated?
I need to grant a process (build pipeline) RBAC access to AKS API for deployment purposes.
But the target AKS cluster has AAD integration active (as described here)
I was expecting to be able to ...
0
votes
0answers
84 views
assign clusterrole to serviceaccount in openshift
We have a serviceaccount created within an openshift project oc -n platform create sa foo. If we describe this sa we get the following:
Name: foo
Namespace: platform
Labels: ...
0
votes
0answers
32 views
Adding multi-way relationships to ldap schema
I have an LDAP server which has the following types of objects:
person - users; listed in ou=people,dc=example,dc=com
organization - companies that are our clients; listed in ou=clients,dc=example,dc=...
0
votes
1answer
74 views
Azure VM managent and metrics role
Is there a one built-in role that allows a user to do only the following:
Start , restart and stop VM.
Display VM metrics to this user.
Metrics such as CPU and RAM utilization.
It seems like it ...
1
vote
1answer
636 views
Custom permissions (RBAC) to access specific Azure AD blade
I am looking for a way of tailoring custom RBAC (granting access\creating role & assigning permissions) to specific Azure AD blade.
In fact, I want my end user with a custom role to be able to ...
0
votes
1answer
25 views
azure RBACRoletodiable cost view
I would like create a custom role which will diable someone from viewing cost of subscription. For example if i give read access to a person he is able to see cost. I need a RBAC role to be created to ...
1
vote
2answers
2k views
Kubernetes Node Metrics Endpoint Returns 401
I have a GKE cluster which, for the sake of simplicity runs just Prometheus, monitoring each member node. Recently I recently upgraded the API server to 1.6 (which introduces RBAC), and had no issues. ...
15
votes
2answers
5k views
sudo not working on certain commands
I have a rather weird problem with sudo on Debian 8. Users cannot execute some of commands in /etc/sudoers.d. I use Chef to distribute configurations, so all files are automatically generated.
...
1
vote
1answer
180 views
Azure security center recommandation: issues installing endpoint protection
i am having a hard time with applying the recommandations of the Azure security center for my Windows VMs: it asks to install endpoint protection, but the issue is that whenever i try to install it ...
0
votes
0answers
21 views
Unable to perform RBAC for vCenter
I have added the vCenter to the AD, and I am able to retrieve groups. We have a Datacenter which has about 7 ESXi hosts. I'd like to slice these hosts, in such a way that a few users are granted ...
1
vote
1answer
34 views
How to enable RBAC automatically
I think I'm missing something simple, but every time I try to gradm -E, I'm being asked for a password. How can I enable it automatically after boot? (so that no password is needed)
1
vote
0answers
111 views
How to define a Management Role Scope which includes multiple OUs in Exchange 2013?
I need to define several custom Management Roles in an Exchange 2013 environment, whose scopes must be limited to recipients in specific OUs; however, these OUs are at the same AD level with other ...
2
votes
1answer
1k views
Group hierarchy in Active Directory [closed]
Is it possible to get group hierarchy in AD? It's for managing permissions to a web app from there.
I need to do this:
Users
Product
Admin
Task
Subtask1
Subtask2
Subtask3
Task 2
So if you are ...
0
votes
1answer
126 views
Role Based Access Control, Where Roles Change Depending on Location In Application
I am tasked with designing a new, role based access model for our system.
The requirements are something to the effect of the following:
A user can log in, and will have a different role depending ...
0
votes
1answer
335 views
RBAC not working
I`m learing RBAC in solaris.
bash-2.03# tail -4 /etc/user_attr
root::::type=normal;auths=solaris.*,solaris.grant;profiles=All
mirror::::type=normal;profiles=Mirror
jz::::type=normal;auths=solaris.*,...
2
votes
1answer
1k views
How to implement and modify policies for Role-based access control on Ubuntu Linux?
Selinux is currently installed on the machine but there's no simple way to enable and modify RBAC for users. Seedit is available for Fedora and CentOS but it is not working on Ubuntu distros.
Are ...
1
vote
1answer
838 views
Running a command as the root “role” in Solaris 11?
Ok, so we have a product which runs a daemon as root, which can communicate over TCP sockets and read / write files. This works fine in Solaris 10, but when we ported it across to Solaris 11, a load ...
3
votes
1answer
271 views
Grsecurity's RBAC policy for scripts
I have some problems with set right policy for my gentoo-based system. I have no idea how can I add permissions for everything which was started by /root/scripts/autosync. I am getting error like:
[...
1
vote
1answer
85 views
Are you able to specify a the profile you want to use in pfexec?
Are you able to specify which profile you want to use for a given user when using pfexec who has been assigned multiple profiles?
One example for this use is so that we can execute a command as a ...
0
votes
1answer
2k views
Listening to 80 port with non-root Glassfish on Centos
I use Glassfish Stack to manage applications. I run Glassfish on CentOS with non-root user. Therefor I am not able to open 80 port as the ports under 1024 are accessibly only by root users.
There is ...
1
vote
2answers
343 views
Can RBAC secure non-root owners files on aix 6.1?
Can i use the RBAC feature on Aix 6.1 to do the following.
file - myfile.txt
I have users - root , aixuser(non-root).
I want only aixuser to have access to file 'myfile.txt' and NOT the root user.
...
