Re: [Freeipa-users] How to create readonly on all IPA data

2013-06-24 Thread Petr Spacek
On 24.6.2013 15:12, Rob Crittenden wrote: Fred van Zwieten wrote: Hi there, We have implemented IPA. We need to give someone in our org a read-only account on all IPA data. So, internal IPA data, user, groups, hosts, dns, etc. All So I want to create a role "Auditor". But then I must build pri

Re: [Freeipa-users] How to create readonly on all IPA data

2013-06-24 Thread Rob Crittenden
Fred van Zwieten wrote: Hi there, We have implemented IPA. We need to give someone in our org a read-only account on all IPA data. So, internal IPA data, user, groups, hosts, dns, etc. All So I want to create a role "Auditor". But then I must build privs and permissions. What would be the simpl