Fixes # 2720 - allow foreman to delete host having certificate

theforeman · Dec 8, 2023 · f410b98 · f410b98
1 parent 2fb6db3
commit f410b98
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/sbin/foreman-prepare-realm b/sbin/foreman-prepare-realm
@@ -59,7 +59,8 @@ else
  --permission='System: Manage Host Certificates' --permission='System: Modify Hosts' --permission='System: Remove Hosts' \
  --permission='System: Manage Host Keytab' --permission='Retrieve Certificates from the CA' --permission='System: Modify Services' \
  --permission='System: Manage Service Keytab' --permission='System: Add DNS Entries' --permission='System: Update DNS Entries' \
- --permission='System: Remove DNS Entries' --permission='System: Read DNS Entries' --permission='Add Host Enrollment Password'
+ --permission='System: Remove DNS Entries' --permission='System: Read DNS Entries' --permission='Add Host Enrollment Password' \
+ --permission='Revoke Certificate' --permission='System: Remove Services'
 fi
 
 ipa role-add 'Smart Proxy Host Manager' --desc='Smart Proxy management'