user with least rights

[Gast]

What are the least rights a user should get, to be able to work for loxberry? Admin is a bit overkill, no? I want to keep it as safe as possible...

[TomekWaw]

Create a user group with Web Interface/Apps right only.

[Christian Fenzl]

Depends on the plugin.

Miniserverbackup needs Admin.
The LoxBerry IO SDK caching functions won’t detect a Miniserver restart without Admin (but refreshes every hour by default).
Time sync from MS needs Admin (but default is NTP).
VI‘s need to be explicitly assigned rights for every single VI, or „Full Access“.

[Gast]

Thansk for the help!
Admin is way too much in my opinion. I don't think Loxberry needs to edit users for example. I learnt to always use the least privileged account possible.
For backup only "Config rights" are enough. I'll see if the rest of the options run fine, but this is (for now) the only plugin for what Loxberry needs direct connection with the miniserver.

[Christian Fenzl]

As you are in testing the required permissions for tasks, you may want to create a table in the LoxBerry area of LoxWiki with “feature x” needs “permission y”.
The new user management isn’t really documented by Loxone (and the current permission documentation is outdated).

This would be very helpful for users, plugin developers and us.

Best regards, Christian

[Gast]

Good idea!
Here I go: https://www.loxwiki.eu/display/LOXEN...xberry+plugins