BigFix REST API create group permissions

1

Can someone clarify the necessary permissions for s user to create a manual group in a custom site via the platform REST API? It works with MO but not with Non-MO that has writer permission to the site and Custom Content creation rights.

2

Manual Groups are always in the operator’s opsite, or in the action site for master operators, if that helps. They aren’t created in custom sites.

3

so for a post to /computergroups/{site type}/{site name} the site type would be opsite and the site name would be the user’s operator site?

4

Yes, an example would be
https://bes-root.example.com:52311/api/computergroups/operator/BESUser3@example.com

5

still no luck. getting a 403 posting to https://root:52311/api/computergroup/operator/<the_name_of_the_local_bes_user_making_the_call>

{"format":"Access is denied","arguments":[]}

6

I logged into the bes console with the local user and the ‘create manual group’ options were greyed out. After granting the user the “Can Create Actions” permission, it could then create the manual group.

Is that expected? I’d rather this user not have the ability to push content. Running v9.5.13

7

I believe that’s expected…a manual group is also an action, in a roundabout way.

8

Thanks for the assistance. I created an enhancement request to try and get that split up to be multiple permissions
https://bigfix-ideas.hcltechsw.com/ideas/BFP-I-149

1 Like