Permissions for the step IIS AppPool - Stop

I got this error when I use the step “IIS AppPool”:
Test-Path : Cannot retrieve the dynamic parameters for the cmdlet. Filename: redirection.config
August 30th 2017 16:22:12Error
Error: Cannot read configuration file due to insufficient permissions

Actually, we don’t find any other way to make it works other than add the tentacle to the administrator group but we don’t want it. What’s the permissions we need more granularly.

Hi,

Could you please confirm that the user your Tentacle runs under has permissions to the IIS folder (C:\Windows\system32\inetsrv).

I hope that helps.

Thank you and best regards,
Henrik

I did it and I end up with this other permissions problem:

stop-webitem : Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
September 1st 2017 10:31:07Error
At D:\Octopus\Work\20170901143104-3\Script.ps1:17 char:9
September 1st 2017 10:31:07Error

  •     Stop-WebAppPool $appPoolName
    

September 1st 2017 10:31:07Error

  •     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    

September 1st 2017 10:31:07Error
+ CategoryInfo : InvalidData: (IIS:\apppools\Staging1:String) [Stop-WebItem], UnauthorizedAccessException
September 1st 2017 10:31:07Error
+ FullyQualifiedErrorId : InvalidOperation,Microsoft.IIs.PowerShell.Provider.StopItemCommand

Hi,

Unfortunately, there is no way to give permission to start/stop an IIS app pool, this is a Microsoft limitation and not Octopus. You could possible use Feature Delegation to allow a non-admin user to perform certain actions but it involves using msdeploy and a special IIS user with password (example here).

My apologies for the inconvenience caused.

Thank you and best regards,
Henrik