Disable exec console for some users or roles

[lordcoste]

Ask a Question!

Hi, is it possible to disable the Exec Console feature for certain users and/or roles? I would like to allow some users to start/stop/restart existing containers but prevent them from accessing a shell inside the containers.
I'm using Business Edition 2.21.3

How can I achieve this?

Regards,

Stefano

[Nick-Portainer]

Hello @lordcoste, thanks for raising this and I have raised it internally. This is something we are aware of and at this stage it is currently not possible to do within Portainer.

This would require a bigger piece of work and at this stage there is no ETA we can offer.

[lordcoste]

Hi @Nick-Portainer , thank you for the quick response and for raising this internally. I understand the complexity of implementing this feature, and I appreciate your efforts.

As a temporary workaround, I would be satisfied with the option to disable the exec function globally for all users. It would help a lot with maintaining security while allowing users to perform other necessary tasks.

Thanks again for your time and consideration!

[gselva]

Hi, I am another customer who needs this. is there a quick fix that we can use while we wait? if we can just hide the option in the UI?! It would be very useful if our deployment team using "operator" role are able to deploy but not get into container andcat /run/secrets ....