[colug-432] RHEL Satellite v5 api user privileges

[Rick Hornsby]

Have a very simple script which hits our Satellite (version 5 - Satellite v5 not RHEL 5) server API to check if a host is registered (by hostname) or not.  There are three possible outcomes: the hostname is registered, the hostname is not registered, or (most important to us) the hostname has been registered more than once.

The trouble I'm running into is that the API user account I created seems to need way more privileges than what ought to be necessary.  The user seems to have to be at least an 'Organization Administrator' - which basically gives the account full read/write access to everything in Satellite.  If the privileges are anything less, the result set from the XMLRPC call to system.getId always returns an empty array.

Looking at the Satellite manual isn't much help - other than to imply user privileges are only allowed to be selected from a small set of pre-defined RH-supplied options.  The only one with enough access (based on testing) is the Org Admin.

Am I missing something?

thanks!