[Freeipa-users] How to create readonly on all IPA data

[Fred van Zwieten]

Hi there,

We have implemented IPA. We need to give someone in our org a read-only
account on all IPA data. So, internal IPA data, user, groups, hosts, dns,
etc. All

So I want to create a role "Auditor". But then I must build privs and
permissions. What would be the simplest/best way to do this?


Fred

Seeing, contrary to popular wisdom, isn’t believing. It’s where belief
stops, because it isn’t needed any more.. (Terry Pratchett)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20130624/9b4c3bd3/attachment.htm>