Skip to main content
Version: Next

Sudo Rules

This page lists the sudo rules that are required for the successful operation of ASI, DataHub, and Events for the ppadmin user.

How to Apply​

Create a dedicated sudoers include file for each application:

sudo visudo -f <full-path-to-sudoers>

Paste the policy lines below. visudo validates syntax before saving.

ASI​

/etc/sudoers.d/interlink-asi-rules

# Restart iss-asi group of services
ppadmin ALL=(root) NOPASSWD: /bin/systemctl stop iss-asi.target, /bin/systemctl start iss-asi.target, /bin/systemctl restart iss-asi.target, /bin/systemctl status iss-asi.target

# Restart authenticator service
ppadmin ALL=(root) NOPASSWD: /bin/systemctl stop iss-asi-authenticator.service, /bin/systemctl start iss-asi-authenticator.service, /bin/systemctl restart iss-asi-authenticator.service, /bin/systemctl status iss-asi-authenticator.service

# Restart legacy service
ppadmin ALL=(root) NOPASSWD: /bin/systemctl stop iss-asi-legacy.service, /bin/systemctl start iss-asi-legacy.service, /bin/systemctl restart iss-asi-legacy.service, /bin/systemctl status iss-asi-legacy.service

# Restart management service
ppadmin ALL=(root) NOPASSWD: /bin/systemctl stop iss-asi-management-service.service, /bin/systemctl start iss-asi-management-service.service, /bin/systemctl restart iss-asi-management-service.service, /bin/systemctl status iss-asi-legacy.service

# Restart core service
ppadmin ALL=(root) NOPASSWD: /bin/systemctl stop iss-asi-core.service, /bin/systemctl start iss-asi-core.service, /bin/systemctl restart iss-asi-core.service, /bin/systemctl status iss-asi-core.service

# Restart dashboard service
ppadmin ALL=(root) NOPASSWD: /bin/systemctl stop iss-asi-dashboards.service, /bin/systemctl start iss-asi-dashboards.service, /bin/systemctl restart iss-asi-dashboards.service, /bin/systemctl status iss-asi-dashboards.service

Events​

/etc/sudoers.d/interlink-events-rules

# Restart events service
ppadmin ALL=(root) NOPASSWD: /bin/systemctl stop iss-asi-events.service, /bin/systemctl start iss-asi-events.service, /bin/systemctl restart iss-asi-events.service, /bin/systemctl status iss-asi-events.service

Datahub​

/etc/sudoers.d/interlink-datahub-rules

# Restart asi datahub service
ppadmin ALL=(root) NOPASSWD: /bin/systemctl stop iss-asi-datahub.service, /bin/systemctl start iss-asi-datahub.service, /bin/systemctl restart iss-asi-datahub.service, /bin/systemctl status iss-asi-datahub.service

# Restart datahub service
ppadmin ALL=(root) NOPASSWD: /bin/systemctl stop iss-datahub.service, /bin/systemctl start iss-datahub.service, /bin/systemctl restart iss-datahub.service, /bin/systemctl status iss-datahub.service

Integration Hub​

/etc/sudoers.d/interlink-integration-hub-rules

# Restart asi datahub service
ppadmin ALL=(root) NOPASSWD: /bin/systemctl stop iss-integration-hub.service, /bin/systemctl start iss-integration-hub.service, /bin/systemctl restart iss-integration-hub.service, /bin/systemctl status iss-integration-hub.service