Creating Agent Users

Agent users must have one or more roles that determine their permissions and capabilities.

The Protegrity Agent Helm chart creates the required roles during installation. Assign them to separate PPC user accounts or combine them with other roles on a single account. To assign multiple roles, provide a comma-separated list.

When assigning Agent roles to an account that already has roles for other PPC products or features, include every role the account should retain. Updating a user’s roles replaces the existing role list. For instructions on creating users and managing role assignments, see the PPC Admin CLI user-management instructions.

Each role grants the capabilities listed in the following table. The following roles are created during installation.

Note: To access the Insight logs, assign the security_viewer role.

Note: To access the Agent panel, assign the agent-user role.

Creating users

To create the users, perform the following steps:

1. Log in to the PPC CLI and sign in to the CLI Manager as the admin user. For instructions on connecting over SSH and signing in, see Accessing the PPC CLI.

   ssh -i ~/.ssh/<cluster_name>_user_svc -p 22 admin@<user-provided-fqdn>
   

2. To create a user with agent-user role, run the following command:

   admin create users --username <username> --email <user email> --first-name <firstname> --last-name <lastname> --password <"Password"> --roles "agent-user"
   

3. To create a user with agent-model-administrator role, run the following command:

   admin create users --username <username> --email <user email> --first-name <firstname> --last-name <lastname> --password <"Password"> --roles "agent-model-administrator"
   

Verifying the required users

To verify if the required users are successfully created, run the following command:

admin list users