Uploaded image for project: 'Bamboo Data Center'
  1. Bamboo Data Center
  2. BAM-21368

Allow restricted admins to dedicate agents

XMLWordPrintable

    • Icon: Suggestion Suggestion
    • Resolution: Unresolved
    • None
    • Agents
    • None
    • 1
    • 6

    • Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

      Problem Definition

      Restricted admins have access to install and manage remote agents. However, they do not have access to dedicate agents and thus restricted admins are not able to clone the environment.

      Steps to reproduce

      1. Login as Restricted Admin
      2. Navigate to Overview->Agents->Dedicate Agent
      3. Try to dedicate agent with restricted admin user

      Suggested Solution

      Starting from Bamboo 7.1 (BAM-19760), only Admins have access to dedicate agents by default. The toggle (that can be altered in Security settings) that allows only admins to dedicate an agent should also allow restricted admins to dedicate the agents and allow restricted admins to clone the environment.

       Workaround

      Enable Allow users to dedicate agents to builds and deployments option in Security settings that also allows restricted admins to dedicate an agent.

            [BAM-21368] Allow restricted admins to dedicate agents

            Andrew Freer added a comment -

            When it comes to matching jobs with the right agent, I have not found capabilities to be sufficient. We need something more powerful. As far as I know, the only other option is using dedication. Dedication is also fairly limited, but it gets us much further than capabilities alone. Maybe there are features in Bamboo that I am not aware of that would allow for more powerful/intelligent job-to-agent matching.

            In short, dedicating agents is a key feature, so I suspect that opening up to restricted admins by default makes good sense. While BAM-19760 raises a good point - that dedication could allow a restricted admin to mess up bamboo (by grabbing all of the agents) - I suspect restricted admins can mess up bamboo in many other ways already, that's why they have "admin" in the name. So I suspect the benefits outweigh the risks here in terms of allowing restricted admins to dedicate by default.

            This is just my Bamboo beginner's two cents though. Hope it is helpful. We do appreciate many features of the Atlassian suite of tools!

            Andrew Freer added a comment - When it comes to matching jobs with the right agent, I have not found capabilities to be sufficient. We need something more powerful. As far as I know, the only other option is using dedication. Dedication is also fairly limited, but it gets us much further than capabilities alone. Maybe there are features in Bamboo that I am not aware of that would allow for more powerful/intelligent job-to-agent matching. In short, dedicating agents is a key feature, so I suspect that opening up to restricted admins by default makes good sense. While BAM-19760 raises a good point - that dedication could allow a restricted admin to mess up bamboo (by grabbing all of the agents) - I suspect restricted admins can mess up bamboo in many other ways already, that's why they have "admin" in the name. So I suspect the benefits outweigh the risks here in terms of allowing restricted admins to dedicate by default. This is just my Bamboo beginner's two cents though. Hope it is helpful. We do appreciate many features of the Atlassian suite of tools!

              Unassigned Unassigned
              01891e068cf2 Nagarjun S (Inactive)
              Votes:
              3 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated: