In this Article

Other Content

KB - Minimum Permissions Required for Service Provider Accounts Configured in Buttonwood Automate

Buttonwood Automate is an orchestration and automation tool. As such, it requires access credentials which grants permissions to programmatically perform tasks within a service provider. These credentials are provided by a Buttonwood Automate administrator when adding the service provider account to Automate and is encrypted and securely stored within the appliance's internal configuration database.

Buttonwood recommends providing administrative level permissions where possible to support new services and features which are continually added to Automate sections list the minimum permissions required for each service provider. Please refer to the service provider's documentation for detailed instructions on how to create custom roles which grant these permissions.

Amazon Web Services (AWS)

Service Access Level Resources
EC2 Full Access All Resources
ELB Full Access All Resources
ELB v2 Full Access All Resources
IAM Full Access All Resources
RDS Full Access All Resources
S3 Full Access All Resources

Microsoft Azure

Service
Microsoft.Compute/*
Microsoft.Resources/subscriptions/resourcegroups/*
Microsoft.Storage/storageAccounts/*
Microsoft.Network/*
Microsoft.DBforMySQL/*
Microsoft.DBforPostgreSQL/*
Microsoft.DBforMariaDB/*
Microsoft.Sql/*
Microsoft.Cache/*

VMware vSphere

Task Description Object Permission
N/A Global

Enable methods
Manage custom attributes
Set custom attributes
Create virtual machines Virtual machine

Inventory.Create new
Inventory.Create from existing
Inventory.Move
Inventory.Register
Inventory.Remove
Inventory.Unregister

Configuration.Add new disk
Configuration.Advanced
Configuration.Add existing disk
Configuration.Add or remove device
Configuration.Configure Raw device
Configuration.Change CPU count
Configuration.Extend virtual disk
Configuration.Memory
Configuration.Remove disk
Configuration.Settings
Configuration.Reset guest information
Configuration.Set Annotation
Datastore

Browse datastore
Allocate space
Low level file operations
Network

Assign network
Resource

Assign virtual machine to resource pool
Deploy virtual machines from templates Virtual machine

Inventory.Create from existing
Configuration.Add new disk
Provisioning.Deploy template
Provisioning.Read customization specifications
Provisioning.Customize
Datastore

Browse datastore
Allocate space
Low level file operations
Network

Assign network
Resource

Assign virtual machine to resource pool
Virtual machine operations Virtual machine

Interaction.Answer question
Interaction.Console interaction
Interaction.Device connection
Interaction.Power On
Interaction.Power Off
Interaction.Reset
Interaction.Configure CD media
Interaction.Configure floppy media
Interaction.VMware Tools install
Snapshot management.Create snapshot
Snapshot management.Remove Snapshot
Snapshot management.Rename Snapshot
Snapshot management.Revert to snapshot