bkr policy-grant: Grant permissions in an access policy¶

Synopsis¶

bkr policy-grant [options]

[--system <fqdn> | --pool <name>]
--permission <permission> [--permission <permission> ...]
[--user <username> | --group <groupname> | --everybody]

Description¶

Modifies the access policy to grant new permissions to the given users or groups.

Options¶

--system <fqdn>¶: Modify the custom access policy for <fqdn>. This option is mutuallly exclusive with --pool.

--pool <name>¶: Modify the access policy for the named system pool. This option is mutually exclusive with --system.

--permission <permission>¶: Grant <permission>. This option must be specified at least once. For a description of the available permissions, see Access policies.

--user <username>¶: Grant permissions to <username>. This option may be specified multiple times, and may be used in combination with --group.

--group <groupname>¶: Grant permissions to <groupname>. This option may be specified multiple times, and may be used in combination with --user.

--everybody¶: Grant permissions to all Beaker users. This option is mutually exclusive with --user and --group.

Common bkr options are described in the Options section of bkr(1).

Exit status¶

Non-zero on error, otherwise zero.

Examples¶

Grant Beaker developers permission to reserve a system:

bkr policy-grant --system=test1.example.com \
    --permission=reserve --group=beakerdevs

See also¶

bkr(1), bkr-policy-revoke(1)