Patch management for Ubuntu permissions

In Ubuntu Patch Management, all user roles are combined, which means that a single user can perform all patch management actions. Ubuntu out-of-the-box settings give the user the following User Group roles:

• Patch Policy Setter
• Patch Deployer
• Software Policy Setter
• Policy Deployer

In addition, the conditions listed as follows must be met:

• To configure Ubuntu patch policies:
  • The user must belong to both Patch Policy Setters and Software Policy Setters User Groups.
  • The user must have Read & Write resource permissions for the Customers to which the server belongs.
  • The Datacenter must be added for both of the above groups.
• To deploy Ubuntu Patch Policies:
  • The user must belong to both Patch Deployers and Software Deployers user groups.
  • The user must have Read & Write resource permissions for the Customers to which the server belongs.
  • The Datacenter must be added for both of the above groups.
• To attach Ubuntu Patch Policies to a Ubuntu server:
  • The user must to have Read & Write permissions on the folder where the target patch policies reside.
  • To import a Debian package, the user must have Read & Write resource permission on the Opsware Customer.

See Patch management for Windows permissions for the standard patching action permissions.

For users in User Group Roles at the facility where the server is managed to have the correct permissions to use Ubuntu patching, they must have the folder permissions shown in the following table.

Folder Permissions for Ubuntu User Group Roles

Folder	User Group Role	Permission
/Opsware	Patch Policy Setter	Read & Write
/Opsware	Software Policy Setter	Read & Write
/Opsware	Patch Policy Deployer	Read
/Opsware	Software Policy Deployer	Read
/Opsware	Superuser	Read & Write
/Opsware	Opsware System Administrator	Read & Write
/Opsware/Patching/Tools	Patch Policy Setter	Read, List, Execute
/Opsware/Patching/Tools	Software Policy Setter	Read, List, Execute
/Opsware/Patching/Tools	Patch Policy Deployer	Read, List, Execute
/Opsware/Patching/Tools	Software Policy Deployer	Read, List, Execute
/Opsware/Patching/Tools	Superuser	Read, List, Execute
/Opsware/Patching/Tools	Opsware System Administrator	Read, List, Execute
/Opsware/Patching/Tools	Command-Line Administrator	Read, List, Execute