Meta tags:
Headings (most frequently used words):
directory, and, user, directories, in, security, access, controls, please, enable, javascript, tasks, built, virtual, privilege, assignments, adding, permissions, restrictions, task, resolutions, specific, algorithm, configuring, multiple, domains, active, ldap, hybrid, this, article,
Text of the page (most frequently used words):
and (74), proget (72), howto (66), the (64), packages (57), create (47), buildmaster (41), ensure (41), package (38), feed (36), from (34), user (33), with (33), directory (28), upgrading (28), build (28), for (26), server (25), otter (24), installation (23), what (22), release (22), list (20), configuration (19), api (19), inedo (18), delete (18), asset (18), access (17), get (17), feeds (17), file (17), files (17), users (16), group (16), private (16), windows (16), powershell (16), nuget (16), tasks (15), are (15), docker (15), repository (15), directories (14), set (14), upload (14), application (14), this (13), publish (13), service (13), built (12), all (12), you (12), permissions (12), your (12), specific (12), license (12), using (11), project (11), deploy (11), download (11), azure (11), proxy (11), script (11), registry (11), python (11), can (10), groups (10), security (10), that (10), site (10), reference (10), http (10), app (10), deployment (10), active (9), used (9), will (9), 2022 (9), task (9), restrictions (9), promote (9), servers (9), legacy (9), scripts (9), import (9), builds (9), ldap (8), corp (8), configure (8), rule (8), allowed (8), otterscript (8), variables (8), integration (8), containers (8), execute (8), pool (8), template (8), storage (8), scripting (8), universal (8), update (8), issue (8), migrate (8), configuring (7), creating (7), linux (7), variable (7), dotnet (7), management (7), git (7), templates (7), net (7), virtual (6), network (6), not (6), credentials (6), versions (6), sign (6), multiple (6), permission (6), rules (6), general (6), push (6), source (6), installing (6), agent (6), iis (6), getting (6), started (6), shell (6), stop (6), start (6), collect (6), modules (6), drift (6), metadata (6), chocolatey (6), export (6), endpoint (6), following (5), principals (5), add (5), jdoe (5), over (5), allows (5), other (5), controls (5), use (5), sdk (5), code (5), romp (5), overview (5), resource (5), operations (5), blocks (5), keys (5), troubleshooting (5), manual (5), guide (5), web (5), psensure (5), administration (5), sca (5), connector (5), customizing (5), tracking (5), database (5), myinedo (4), support (4), system (4), restricted (4), products (4), single (4), admin (4), hybrid (4), such (4), domains (4), mycompany (4), trusteddomain (4), example (4), enable (4), query (4), range (4), control (4), policies (4), integrated (4), javascript (4), extension (4), extending (4), notes (4), cli (4), maintenance (4), restore (4), install (4), services (4), value (4), replace (4), zipfile (4), rpm (4), firewall (4), jsencode (4), jobs (4), running (4), image (4), audit (4), folder (4), sbom (4), projects (4), devops (4), migrating (4), importing (4), replication (4), terraform (4), pypi (4), visual (4), studio (4), rubygems (4), artifacts (4), deployments (4), pipelines (4), tests (4), applications (4), automated (4), have (3), may (3), these (3), enabled (3), behavior (3), logging (3), case (3), only (3), they (3), search (3), then (3), verify (3), available (3), feature (3), which (3), same (3), new (3), perform (3), apply (3), view (3), etc (3), production (3), precedence (3), more (3), developer (3), pull (3), manage (3), defined (3), please (3), extensions (3), tools (3), advanced (3), text (3), functions (3), engine (3), strings (3), comments (3), architecture (3), backup (3), backing (3), managing (3), agents (3), authentication (3), request (3), https (3), psverify (3), dsc (3), repackage (3), remediate (3), batch (3), servername (3), filecontents (3), 2023 (3), 2024 (3), 2025 (3), bash (3), tag (3), archive (3), issues (3), scan (3), status (3), connectors (3), types (3), methods (3), connect (3), retention (3), continuous (3), versioning (3), conan (3), cran (3), repositories (3), conda (3), integrating (3), org (3), helm (3), npm (3), java (3), maven (3), monitors (3), dependencies (3), databases (3), releases (3), deploying (3), docs (2), 2026 (2), privilege (2), assignments (2), who (2), authenticated (2), whether (2), catch (2), any (2), common (2), documentation (2), default (2), contains (2), username (2), page (2), associated (2), logins (2), symbol (2), matching (2), login (2), domain (2), but (2), fails (2), when (2), both (2), many (2), functionality (2), means (2), bob (2), smith (2), account (2), installations (2), write (2), sorted (2), first (2), action (2), restriction (2), would (2), developers (2), take (2), scoping (2), resolve (2), principal (2), scope (2), either (2), assigned (2), adding (2), also (2), internal (2), experience (2), members (2), accounts (2), dev (2), function (2), browser (2), hosting (2), operation (2), downloads (2), verification (2), local (2), machine (2), features (2), execution (2), statements (2), formal (2), protocol (2), client (2), instances (2), silent (2), sql (2), restoring (2), upgrade (2), product (2), microsoft (2), saml (2), center (2), high (2), availability (2), load (2), balancing (2), offline (2), pre (2), hub (2), binary (2), shverify2 (2), shensure2 (2), shcall (2), acquire (2), key (2), pyverify (2), psverify2 (2), psexec (2), psensure2 (2), psdsc (2), pscall2 (2), pscall (2), module (2), restart (2), recycle (2), binding (2), assets (2), transfer (2), sleep (2), shensure (2), fileattributes (2), send (2), email (2), rename (2), pyensure (2), pycall (2), packagefile (2), post (2), osexec (2), oscall (2), exec (2), hostsentry (2), copy (2), concatenate (2), debian (2), extract (2), appsetting (2), batcall (2), xmlencode (2), xml (2), urlencode (2), trimstart (2), trimend (2), trim (2), toupper (2), tolower (2), substring (2), regexreplace (2), padright (2), padleft (2), newline (2), matchesregex (2), join (2), htmlencode (2), coalesce (2), split (2), regexfind (2), rolename (2), environmentvariable (2), serversinroleandenvironment (2), serversinrole (2), serversinenvironment (2), allservers (2), allroles (2), allenvironments (2), acquiredservers (2), pythonpath (2), pseval (2), pscredential (2), preferwindowspowershell (2), autoterminatepowershellprocess (2), increment (2), floor (2), expr (2), decrement (2), compare (2), ceiling (2), abs (2), math (2), mapset (2), mapremove (2), mapitem (2), mapadd (2), mapkeys (2), maps (2), listitem (2), listindexof (2), listcount (2), listset (2), listremove (2), listinsert (2), listconcat (2), lists (2), sheval (2), fromjson (2), tojson (2), json (2), eval (2), specialwindowspath (2), secureresourceproperty (2), securecredentialproperty (2), dateutc (2), date (2), resolvepath (2), pathcombine (2), fileexists (2), directoryexists (2), filesondisk (2), getvariablevalue (2), workingdirectory (2), isvariabledefined (2), executionstate (2), executionid (2), environmentname (2), executions (2), orchestration (2), infrastructure (2), aws (2), lightsail (2), resources (2), team (2), augmented (2), help (2), ps1 (2), remediation (2), compliance (2), collecting (2), installed (2), sync (2), role (2), environment (2), connecting (2), scheduled (2), folders (2), vulnerabilities (2), licenses (2), remove (2), member (2), show (2), comment (2), health (2), apikey (2), endpoints (2), 2020 (2), 2021 (2), oss (2), teams (2), content (2), webhooks (2), notifications (2), cloud (2), deprecated (2), development (2), edge (2), mirroring (2), promotion (2), share (2), automatic (2), php (2), charts (2), node (2), sample (2), scala (2), gradle (2), gallery (2), drop (2), repackaging (2), commit (2), vstest (2), artifact (2), config (2), run (2), reject (2), teamcity (2), jenkins (2), github (2), unix (2), nunit (2), runner (2), unit (2), asp (2), mvc (2), event (2), listeners (2), steps (2), checks (2), pipeline (2), branches (2), things (2), llc, com, article, unauthenticated, logged, anonymous, provided, valid, everyone, privileges, granted, our, check, out, shared, initially, password, additional, upon, removed, prior, could, approximate, result, yield, failed, exception, name, searched, compan, invalid, error, fail, validate, logs, hunter42, jdoedawn, jdoeson, jdoechestor, enter, box, see, configured, need, want, there, describes, starting, preview, does, necessarily, come, forest, collection, extensible, own, comes, two, requested, grants, demand, attribute, specified, combined, into, comparing, each, priority, algorithm, applies, takes, except, natural, way, describe, english, might, consider, less, ones, because, define, levels, determining, particular, quite, complex, uses, guidelines, resolutions, deleting, consist, elements, viewing, downloading, promoting, type, should, given, least, settings, overwrite, full, instance, administer, description, ships, five, restrict, performing, overlapping, well, externally, model, granular, external, while, allowing, organization, memberships, paid, trial, editions, specify, hdars, allow, granting, global, requires, properly, manually, outdated, writing, simple, extensibility, layout, sources, inspection, publishing, auditing, history, command, parameters, maintaining, discontinued, programmatically, invoking, executing, different, scenarios, runtime, pools, templating, else, try, loop, values, descriptions, grammar, specification, video, tickets, stopgap, invoices, payments, renewing, purchasing, activation, accessing, flow, message, formats, setting, outbound, communication, requirements, postgresql, pingid, entra, prometheus, diagnostic, analytics, configurations, openldap, generic, integrate, cluster, compose, switch, reverse, downgrade, installedpackages, issimulation, job, rafts, bat, admins, remote, desktop, connections, remediating, automatically, desired, verifying, recurring, gui, input, forms, automation, multipart, manifest, assess, vulnerabilties, attributes, edit, promotions, apikeys, pgutil, commands, existing, premise, 2019, clair, index, quirk, old, migration, another, sonatype, nexus, jfrog, artifactory, myget, white, labeling, isv, edition, slack, localization, executable, blob, google, amazon, self, receive, alerts, filter, licensing, detection, blocking, block, vulnerability, scanning, assessment, exporting, software, composition, analysis, multisite, federated, distribution, computing, disaster, recovery, semantic, registries, terminology, concepts, container, assetdirectories, library, composer, recipes, hashicorp, cargo, rust, pub, dart, flutter, comprehensive, alpine, apk, aggregate, yum, public, pipenv, poetry, artifacthub, kubernetes, apt, bower, sbt, vsix, ruby, community, internalized, approved, optionally, odata, semver2, bulk, across, paths, usage, instructions, third, party, statistics, approve, open, semver, setup, deployables, webhook, plans, earlier, updates, 2018, based, containerized, raft, pack, merge, releaseassets, transition, milestone, issuecomment, close, checkout, attach, generate, assembly, transform, version, tool, test, msbuild, statement, disk, change, wait, number, note, releasevariable, releasenumberpart, releasenumber, releasename, previousreleasenumber, incrementreleasenumber, comparereleasesequence, pipelinestagename, pipelinename, packageversion, packageproperty, packagehash, packagesinbuild, nugetexepath, vstestexepath, promotioncomments, msbuildtoolspath, jqlvalue, devenvpath, isrollback, isreexecution, executionuser, environments, databaseconnectionsinenvironment, containertag, containerdigest, containersinbuild, configurationfileversion, configurationfiletext, configurationfiles, configurationfileinstances, buildvariable, pullrequestid, dockertag, dockerrepository, ciprojectscope, ciproject, cibuildnumber, cibuild, buildnumber, buildmasterurl, buildmasterid, branch, artifactpath, buildsinrelease, artifactsinbuild, applicationname, applicationid, applicationgroupname, applicationgitlibrary, applicationexists, applicationdescription, releasesinapplication, applicationsingroup, cancel, clone, purge, triggering, via, badges, native, bitbucket, subversion, youtrack, jira, gitea, gitlab, integrations, ssh, website, exe, targets, wordpress, junit, jetty, wildfly, jboss, eap, tomcat, ant, fxcop, xunit, mstest, entity, framework, core, webforms, console, platforms, containzerizing, preventing, how, displayed, rendered, prompts, calendars, blue, green, patterns, rollbacks, approvals, approval, gates, best, practices, delivery, reports, testing, store, hotfix, workflows, svn, tfs, results, found, internet, explorer, longer, supported, still, work, degraded, some, won, modern, chrome, firefox,
Text of the page (random words):
r api methods and cli commands getting started with pgutil getting started with http endpoints api keys access create apikey list apikeys delete apikey proget health feeds create feed get feed list feeds update feed delete feed get feed storage update feed storage list feed storage types connectors create connector get connector list connectors update connector delete connector packages list packages list package versions download package upload package delete package audit package set package status repackage package promote package query package promotions show package metadata sca builds projects builds create update build get build list builds audit build promote build scan build projects create update project get project list projects issues list issues delete issue resolve issue comments create update comment list comments delete comment sbom export sbom import sbom security users create user edit user delete user show user list users groups create group delete group list groups add group member remove group member list group members tasks create task delete task list tasks list task attributes permissions add permission list permissions remove permission licenses create license get license list licenses update license delete license vulnerabilities audit vulnerabilties assess vulnerabilities universal feed import universal package create upload universal package download virtual package manifest download universal package file asset directories files upload asset file multipart asset file upload download asset file delete asset file folders create asset folder list asset folders delete asset folder export asset folder import archive metadata set asset metadata get asset metadata containers audit image create tag delete tag delete image otter getting started with otter orchestration server automation jobs templates create a gui for scripts with input forms scheduled recurring jobs connecting to your servers with otter what is a server in otter what is an environment in otter what is a server role in otter configuration export import sync collecting verifying configuration desired configuration with otterscript collecting installed packages running containers compliance as code with powershell psverify howto ensure chocolatey packages with otter drift remediation configuration as code automatically remediate configuration drift creating drift remediation jobs remediating drift with powershell psensure scripting in otter what are scripts in otter what are variables in otter shell bash scripting howto add a user with a bash script powershell ps1 scripting howto verify configure remote desktop connections howto verify configure local windows admins accounts windows batch bat scripting python py scripting otterscript operations augmented help reference rafts git storage configuring for your team security and access controls api access and api keys credentials resources installation upgrading otter installation guide agent installation reference installing otter on aws lightsail upgrading otter upgrading to otter 2025 upgrading to otter 2024 upgrading to otter 2023 upgrading to otter 2022 upgrading to otter 3 0 administration maintenance license restrictions service administration extending otter backing up otter reference otter api reference infrastructure management api job orchestration api server configuration management api variables management api otterscript reference built in functions variables executions environmentname executionid executionstate issimulation isvariabledefined workingdirectory getvariablevalue files filesondisk directoryexists filecontents filecontents fileexists pathcombine resolvepath general range date dateutc securecredentialproperty secureresourceproperty specialwindowspath eval json jsencode tojson fromjson linux sheval lists listconcat listinsert listremove listset listcount listindexof listitem maps mapkeys mapadd mapitem mapremove mapset math abs ceiling compare decrement expr floor increment powershell autoterminatepowershellprocess preferwindowspowershell pscredential pseval python pythonpath servers acquiredservers allenvironments allroles allservers serversinenvironment serversinrole serversinroleandenvironment environmentvariable rolename servername servername strings regexfind split coalesce htmlencode join jsencode matchesregex newline padleft padright regexreplace replace substring tolower toupper trim trimend trimstart urlencode xml xmlencode built in operations batch batcall docker collect docker containers dotnet ensure appsetting files ensure asset extract zipfile get asset firewall ensure firewall rule general apply template collect debian packages collect rpm packages collect installedpackages concatenate files copy files create directory create file create package create zipfile delete files download asset download http ensure directory ensure file ensure hostsentry ensure metadata ensure package exec execute python script get http install package oscall osexec post http push packagefile pycall pyensure query package remediate drift rename file repackage replace text send email set fileattributes set variable shensure sleep transfer files upload assets upload http iis ensure app pool ensure application ensure site ensure site binding ensure virtual directory recycle app pool start app pool start site stop app pool stop site otter ensure server restart server powershell collect dsc modules collect powershell modules ensure dsc resource ensure powershell module ensure powershell repository pscall pscall2 psdsc psensure psensure using scripts psensure2 psexec psverify psverify2 proget promote package python pyverify registry ensure registry key value get registry value servers acquire server release server services ensure service start windows service stop windows service shell execute shell script shcall shensure2 shverify2 windows sign binary installation maintenance windows inedo hub howto install on windows howto upgrade or downgrade getting started with inedo hub howto install pre release product versions offline installation silent installation cli reference troubleshooting web hosting https configuring https howto configure iis as a reverse proxy for the integrated web server howto switch to integrated web server from iis troubleshooting manual installation linux docker docker installation guide upgrading docker containers docker compose installation guide https support on linux troubleshooting docker installations high availability load balancing configuring high availability load balancing managing your cluster user directories domains ldap howto integrate inedo products with active directory active directory v5 openldap generic ldap windows integrated authentication troubleshooting ldap ad integration legacy configurations active directory ldap v4 advanced configuration v3 hybrid user directories logging analytics diagnostic center http request logging prometheus installation integration saml authentication saml authentication overview azure ad microsoft entra id single sign on pingid single sign on when to upgrade your inedo product managing agents and servers backing up restoring installation configuration files postgresql inedo products sql server inedo products backup up restore for sql server inedo agent what is the inedo agent installation upgrading linux installation security requirements silent installation manual installation upgrading downloads release notes maintenance configuration configuring the inedo agent setting up outbound communication using the same agent with multiple instances troubleshooting internal architecture client server architecture message formats network protocol v1 network protocol v2 server flow myinedo what is myinedo creating accessing your myinedo account license keys activation purchasing a license renewing a license invoices payments stopgap license keys support tickets create support video otterscript execution engine reference formal specification formal grammar otterscript otterscript overview comments descriptions strings values statements and blocks general blocks loop blocks try catch blocks if else blocks other statements inedo execution engine operations functions text templating resource pools runtime variables advanced scenarios features executing tasks as a different user programmatically invoking otterscript romp discontinued using romp installing configuring and maintaining configuration parameters installing romp maintenance romp cli reference command overview auditing local machine history creating and publishing packages credentials installation inspection and verification package sources romp configuration common configuration package layout downloads source code extensibility inedo sdk inedo sdk versions release notes extending inedo tools using the sdk writing a simple create file operation creating an extension using the sdk outdated creating an extension using the sdk 1 x hosting a private extensions feed manually installing extensions please enable javascript proget requires the use of javascript to function properly please enable javascript in your browser for this site security and access controls security and access control policies are defined by granting principals users or groups permission to perform specific tasks in a specific scope feed specific feed group specific or global for example you can specify the hdars developers group is allowed to publish packages to the dev feed group which would allow all users in that group to publish packages to all dev feeds scoping is only available in paid and trial proget editions feed groups are available from proget v6 principals are defined in a user directory that is either internal i e integrated with proget or external such as active directory and ldap this allows you to create a single sign on experience while allowing other members of the organization to manage user accounts and group memberships you can also restrict principals from performing tasks such as the developer group is not allowed to publish packages in the restricted feed these overlapping rules as well as externally defined user directories can be used to model granular access control policies tasks proget ships with five tasks task description administer full control over the proget instance manage feed allows access to manage feed settings delete packages and overwrite packages promote packages allows access to promoting packages to a specific feed of the same feed type users assigned this task should also be given at least the view and download packages task for the source feed publish packages allows access to publish upload push and pull packages from a feed view and download packages allows access to viewing and downloading packages from a feed adding permissions and restrictions tasks are assigned to principals by adding or deleting permissions permissions or restrictions on the admin security tasks page permissions consist of the following elements principal either a user or a group scope a specific feed a feed group or all feeds task what the principal is allowed to do or not do task resolutions because you can define both permissions and restrictions at multiple scoping levels determining whether a user is allowed to perform a particular action can be quite complex in general proget uses the following guidelines to resolve tasks more specific permissions take precedence over less specific ones restrictions take precedence over permissions for example consider the following set of rules the developer group is allowed to promote packages the developer group is not allowed to promote packages to a production feed a more natural way to describe this in english might be developers are allowed to promote packages from any feed except the production feed in this case the restriction rule 2 applies only to the production feed and in this case it takes precedence over the first permission rule 1 specific algorithm all grants that would apply to the demand attribute e g view project deploy package etc for the specified range i e specific feed or all feeds are combined into a list and then sorted by comparing the range of each rule to the following priority user feed feed group restriction for example a user specific rule is sorted over a feed specific rule the first rule is then used if it is a permission the user is allowed to perform the requested action user directories a user directory is a collection of users and groups that proget can query they are extensible which means you can write your own and proget comes with two directories built in the default user account system used by new installations of proget active directory ldap users and groups from an ldap active directory directory are used these can come from multiple domains in an active directory forest task permissions and restrictions are associated with a user directory which means that bob smith from the built in directory does not necessarily have the same permissions as bob smith from the active directory configuring multiple directories domains this functionality describes functionality starting in proget 2022 buildmaster 2022 and otter 2022 this is is available as a preview feature in proget 6 0 8 you can configure as many user directories as you need and enable the directories you want to search if there are multiple enabled user directories they will all be used to search for users groups and verify logins for example if mycompany corp and trusteddomain corp are both configured and the built in user sign on is enabled if you enter jdoe in a search box then you may see jdoechestor from the built in users jdoeson mycompany corp jdoe trusteddomain corp jdoedawn trusteddomain corp when a user logs in with jdoe and hunter42 the built in users will be used to validate the login and if that fails the mycompany corp domain will be used but if that fails the trusteddomain corp domain will be used the user will get an invalid login error if they all fail as a result this behavior may yield to logging of failed logins the exception to behavior is if the username contains a or symbol such as jdoe mycompany corp or compan jdoe in that case only the domains that matching that name searched hybrid user directory prior to proget 2022 buildmaster 2022 and otter 2022 you could create a hybrid user directories to approximate this behavior upon upgrading to these versions the hybrid user directory will be removed and the associated directories will be enabled built in directory proget s built in user directory is used by default and initially contains a single user with the username admin and password admin you can add additional users and groups to this directory using the admin security users page active directory ldap this is common to all of our products check out the shared documentation virtual privilege assignments as of proget v5 2 5 privileges may be granted or restricted for the following catch all principals in an...
|
