Product: Cumulocity CLI (npm install -g @c8y/cli), version 1018.0.240
Could we please ask what the minimum required set of user permission is to run “c8ycli deploy”?
We can’t seem to find documentation for this information.
Hi @leonard_chu,
The @c8y/cli uses the endpoints for creating/updating/listing applications (Cumulocity IoT - OpenAPI Specification).
It therefore needs the ROLE_APPLICATION_MANAGEMENT_READ and ROLE_APPLICATION_MANAGEMENT_ADMIN permissions.
Note that the ROLE_APPLICATION_MANAGEMENT_ADMIN is one of the most powerful permissions that you can have, as it allows you to upload microservices, which can get all permissions defined in their microservice manifest.
Regards,
Tristan
2 Likes
Hi Tristan,
Thanks for providing the details.
If I want to create a user with the right to run c8ycli deploy, which roles should I assign to this user?
Hi @leonard_chu,
You could use the predefined Admin User global role, but this would also give you more permissions…
In case you really want to limit the permissions to what you actually need, I would suggest to create a new global role and granting that role only the Application management read & admin permission:
You can then assign this global role to your user.
Regards,
Tristan
1 Like
Hi Tristan,
Awesome. Thanks very much for your help!