Hide Forgot
Document URL: https://access.redhat.com/documentation/en/red-hat-cloudforms/4.1/deployment-planning-guide/#data_collection_for_red_hat_enterprise_linux_openstack_platform Section Number and Name: 4.5.4 Data Collection for Red Hat Enterprise Linux OpenStack Platform: create users and roles Describe the issue: The OSP cloud provider supports ceilometer, but currently requires the use of an admin role, my security standards prevent me from giving cart blanch access to my OSP overcloud environment. Can you please enumerate the permissions required by CFME so that I can use least privilege when creating the ceilometer user for CFME in my OSP overcloud environment. Suggestions for improvement: Add a section indicating required roles for the ceilometer user in the OSP provider. Additional information:
Thank you for raising this bug. After further discussion with the program team, we have been given the advice not to document specific permissions for service accounts at this time based on the following article - http://cloudformsblog.redhat.com/2017/08/16/security-management-operations/ As such, I will be closing this bug for now, but we can re-investigate this request again in the future if required.
Cancelling old needinfo request.