restricted teamcity agents pool
I would like to create a pool of agents that will be restricted. It should be associated with one project only and only project administrators should have permission to assign and un-assign agents to this pool.
Is this possible?
https://confluence.jetbrains.com/display/TCD10/Agent+Pools
TC documentation says:
A user can assign and un-assign projects and agents from a pool only if he/she has "Change agent pools associated with project" for all projects associated with the pool.
This doesn't seem to work for me though. In agents -> pools view I can see one pool and under "Assign Project" button for this pool it says:
"There is 1 project you do not have permissions to see."
There are no other projects assigned to this pool. Clearly there is one project I do not have access to and I can still assign and un-assign agents from this pool. (I have project administrator roles for other projects).
It is good enough for me if only project administrators will be able to re-assign agents to other pools. I do not care about assigning new agents.
Using TeamCity version - 10.0.2.
Please sign in to leave a comment.
Hello Alexander,
Could you please clarify the usage model of your pool?
Do you need to
or
We have recently updated the documentation to clarify about Required Permissions for Agent Pools.
Hi Marina,
Thank you!
I need to have a pool of agents associated with one project and only project admins should be allowed to move agents to any other pool.
So I want to have:
- project: projectA
- pool: poolA
- projectA is assigned to poolA
Now only project administrators of projectA should be allowed to assign agents from poolA to other pools. (basically that means if you are not project admin of projectA you cannot use agents from poolA).
The updated documentation says: "A user can assign / disassociate projects and move agents between pools (assign and un-assign them) only if he/she has "Change agent pools associated with project" for all projects associated with all affected pools.". However when I go to Agents -> Pool, I can see one pool and there is an information under "assign projects.." button: "There is 1 project you do not have permissions to see". Clearly there is a pool with an assigned project that I do not have access to, still I can assign and unassign agents from this pool.
Hello Alexander,
If you are able to move agent between pools, then you have "Change agent pools associated with project" for the projects assisiated with the pools. Either you roles include Project Administrator roles for those projects or System Administator role or Agent Manager role in TeamCity.
Could you please attach a screenshot of your Roles and Permissions - Username (right-top corner) | My Settings & Tools | Roles page?