User permission errors

Legacy Uncategorised
1

Hi i have an issue where the octopus server does not allow me to install tenatacles remotely powershell on the tenatacle server i get
this from logs:

2016-08-11 09:45:36.2323      1  INFO  Octopus Deploy: Tentacle version 3.3.10 (3.3.10+Branch.master.Sha.365b9921133c9490a3ac820844cbb8edb603873f)
2016-08-11 09:45:37.2011      1  INFO  Creating empty configuration file: D:\octopus\Tentacle.config
2016-08-11 09:45:37.2167      1  INFO  Saving instance: Tentacle
2016-08-11 09:45:38.0604      1  INFO  Octopus Deploy: Tentacle version 3.3.10 (3.3.10+Branch.master.Sha.365b9921133c9490a3ac820844cbb8edb603873f)
2016-08-11 09:45:40.4198      1  INFO  A new certificate has been generated and installed. Thumbprint:
2016-08-11 09:45:40.4198      1  INFO  ***************************************************
2016-08-11 09:45:41.0136      1  INFO  Octopus Deploy: Tentacle version 3.3.10 (3.3.10+Branch.master.Sha.365b9921133c9490a3ac820844cbb8edb603873f)
2016-08-11 09:45:41.8261      1  INFO  Removing all trusted Octopus servers...
2016-08-11 09:45:43.0605      1  INFO  Octopus Deploy: Tentacle version 3.3.10 (3.3.10+Branch.master.Sha.365b9921133c9490a3ac820844cbb8edb603873f)
2016-08-11 09:45:44.0136      1  INFO  Home directory set to: D:\Octopus
2016-08-11 09:45:45.0761      1  INFO  Octopus Deploy: Tentacle version 3.3.10 (3.3.10+Branch.master.Sha.365b9921133c9490a3ac820844cbb8edb603873f)
2016-08-11 09:45:46.1699      1  INFO  Application directory set to: D:\Octopus\Applications
2016-08-11 09:45:46.2793      1  INFO  Services listen port: 10933
2016-08-11 09:45:46.9199      1  INFO  Octopus Deploy: Tentacle version 3.3.10 (3.3.10+Branch.master.Sha.365b9921133c9490a3ac820844cbb8edb603873f)
2016-08-11 09:45:47.8730      1  INFO  Adding 1 trusted Octopus servers
2016-08-11 09:45:49.4199      1  INFO  Octopus Deploy: Tentacle version 3.3.10 (3.3.10+Branch.master.Sha.365b9921133c9490a3ac820844cbb8edb603873f)
2016-08-11 09:45:51.7012      1 ERROR  ===============================================================================
2016-08-11 09:45:51.7012      1 FATAL  You do not have permission to perform this action. Please contact your Octopus administrator. Missing permission: MachineEdit
Octopus.Client.Exceptions.OctopusSecurityException: You do not have permission to perform this action. Please contact your Octopus administrator. Missing permission: MachineEdit
   at Octopus.Client.OctopusClient.DispatchRequest[TResponseResource](OctopusRequest request, Boolean readResponse) in Y:\work\refs\tags\3.3.10\source\Octopus.Client\OctopusClient.cs:line 491
   at Octopus.Client.OctopusClient.Get[TResource](String path, Object pathParameters) in Y:\work\refs\tags\3.3.10\source\Octopus.Client\OctopusClient.cs:line 85
   at Octopus.Client.OctopusRepository.CertificateRepository.GetOctopusCertificate() in Y:\work\refs\tags\3.3.10\source\Octopus.Client\OctopusRepository.cs:line 724
   at Octopus.Tentacle.Commands.RegisterMachineCommand.Start() in Y:\work\refs\tags\3.3.10\source\Octopus.Tentacle\Commands\RegisterMachineCommand.cs:line 82
   at Octopus.Shared.Startup.AbstractCommand.Octopus.Shared.Startup.ICommand.Start(String[] commandLineArguments, ICommandRuntime commandRuntime, OptionSet commonOptions) in Y:\work\refs\tags\3.3.10\source\Octopus.Shared\Startup\AbstractCommand.cs:line 57
   at Octopus.Shared.Startup.ConsoleHost.Run(Action`1 start, Action shutdown) in Y:\work\refs\tags\3.3.10\source\Octopus.Shared\Startup\ConsoleHost.cs:line 72
   at Octopus.Shared.Startup.OctopusProgram.Run() in Y:\work\refs\tags\3.3.10\source\Octopus.Shared\Startup\OctopusProgram.cs:line 87
2016-08-11 09:45:52.3106      1  INFO  Octopus Deploy: Tentacle version 3.3.10 (3.3.10+Branch.master.Sha.365b9921133c9490a3ac820844cbb8edb603873f)
2016-08-11 09:45:53.0293      1  INFO  Service installed
2016-08-11 09:45:53.5449      1  INFO  Waiting for service to start. Current status: StartPending
2016-08-11 09:45:53.8575      1  INFO  Waiting for service to start. Current status: Running
2016-08-11 09:45:54.1699      1  INFO  Service started

but looking in the octopus dashboard:

Test Permissions
myuser (myuser@**.com)

Teams
The user myuser@**.com is a member of the following teams:

Octopus Administrators
Everyone
Permissions
The user has the following permissions:

Permission	Projects	Environments
AccountCreate		
AccountDelete		
AccountEdit		
AccountView		
ActionTemplateCreate		
ActionTemplateDelete		
ActionTemplateEdit		
ActionTemplateView		
AdministerSystem		
ArtifactCreate		
ArtifactDelete		
ArtifactEdit		
ArtifactView		
BuiltInFeedAdminister		
BuiltInFeedDownload		
BuiltInFeedPush		
DefectReport		
DefectResolve		
DeploymentCreate		
DeploymentDelete		
DeploymentView		
EnvironmentCreate		
EnvironmentDelete		
EnvironmentEdit		
EnvironmentView		
EventView		
FeedView		
InterruptionSubmit		
InterruptionView		
InterruptionViewSubmitResponsible		
LibraryVariableSetCreate		
LibraryVariableSetDelete		
LibraryVariableSetEdit		
LibraryVariableSetView		
LifecycleCreate		
LifecycleDelete		
LifecycleEdit		
LifecycleView		
MachineCreate		
MachineDelete		
MachineEdit		
MachineView		
ProcessEdit		
ProcessView		
ProjectCreate		
ProjectDelete		
ProjectEdit		
ProjectGroupCreate		
ProjectGroupDelete		
ProjectGroupEdit		
ProjectGroupView		
ProjectView		
ReleaseCreate		
ReleaseDelete		
ReleaseEdit		
ReleaseView		
TaskCancel		
TaskCreate		
TaskView		
TaskViewLog		
TeamCreate		
TeamDelete		
TeamEdit		
TeamView		
UserInvite		
UserRoleEdit		
UserRoleView		
UserView		
VariableEdit		
VariableEditUnscoped		
VariableView		
VariableViewUnscoped

so i clearly have the permission… what should i do?

2

Hi Tony,

It seems like the API key you’re using in the command line to register your Tentacle doesn’t belong to a user with enough permissions (apparently missing ‘MachineEdit’). Can you double check if that API key belongs to a user that has this permission? You could also test it out by creating a brand new API key for your own user (which by your previous screenshot seems to have plenty permissions to do this) and use that one in the command instead.

Kind regards,

Kenny

3

Thanks! this solved the issue. but it is still strange since the API i used was from a user with the exakt same rights as this user…