In the host-configuration guide (section 10.5), please add a section on the minimum permissions required to run the bootstrap script. Upstream docs here (https://github.com/Katello/katello-client-bootstrap/blob/master/README.md) in the 'Permissions' section. 


Additionally to create a role for a user with the minimal permissions to run bootstrap.py a user can use hammer to generate this: 


ROLE='Bootstrap_User'
hammer role create --name "$ROLE"
hammer filter create --role "$ROLE" --permissions view_organizations
hammer filter create --role "$ROLE" --permissions view_locations
hammer filter create --role "$ROLE" --permissions view_domains
hammer filter create --role "$ROLE" --permissions view_hostgroups
hammer filter create --role "$ROLE" --permissions view_hosts
hammer filter create --role "$ROLE" --permissions view_architectures
hammer filter create --role "$ROLE" --permissions view_ptables
hammer filter create --role "$ROLE" --permissions view_operatingsystems
hammer filter create --role "$ROLE" --permissions create_hosts