Add missing service account and privs

2024-09-27 22:34:14 +00:00 · 2021-01-01 20:50:00 -07:00 · 2021-01-01 20:50:00 -07:00 · d2dc1bef07
commit d2dc1bef07
parent 8e2f81c415
2 changed files with 14 additions and 0 deletions
--- a/ansible/playbooks/vars/ipaprivs.yml
+++ b/ansible/playbooks/vars/ipaprivs.yml
@ -26,3 +26,10 @@ iparoles:
      - "Netgroups Administrators"
    user:
      - hostman
+  - role: IPA User Managers
+    description: Rocky IPA User Managers responsible for idm flow
+    privileges:
+      - "Group Administrators"
+      - "Stage User Administrators"
+      - "User Administrators"
+      - "FAS Agreement Administrators"
--- a/ansible/playbooks/vars/svcusers.yml
+++ b/ansible/playbooks/vars/svcusers.yml
@ -14,6 +14,13 @@ svcusers:
    password: ThisIsNotMyPassword1!
    title: System Account - Kerberos Key Manager
    loginshell: /sbin/nologin
+  - name: userman
+    first: User
+    last: Manager
+    email: infrastructure@rockylinux.org
+    password: ThisIsNotMyPassword1!
+    title: System Account - User Manager
+    loginshell: /sbin/nologin
  - name: rockykoji
    first: Koji
    last: Manager