Sudo Rules
This page lists the sudo rules that are required for the successful operation of ASI, DataHub, and Events for the ppadmin user.
How to Apply
Create a dedicated sudoers include file for each application:
sudo visudo -f <full-path-to-sudoers>
Paste the policy lines below. visudo validates syntax before saving.
ASI
/etc/sudoers.d/interlink-asi-rules
# Restart iss-asi group of services
ppadmin ALL=(root) NOPASSWD: /bin/systemctl stop iss-asi.target, /bin/systemctl start iss-asi.target, /bin/systemctl restart iss-asi.target, /bin/systemctl status iss-asi.target
# Restart authenticator service
ppadmin ALL=(root) NOPASSWD: /bin/systemctl stop iss-asi-authenticator.service, /bin/systemctl start iss-asi-authenticator.service, /bin/systemctl restart iss-asi-authenticator.service, /bin/systemctl status iss-asi-authenticator.service
# Restart legacy service
ppadmin ALL=(root) NOPASSWD: /bin/systemctl stop iss-asi-legacy.service, /bin/systemctl start iss-asi-legacy.service, /bin/systemctl restart iss-asi-legacy.service, /bin/systemctl status iss-asi-legacy.service
# Restart management service
ppadmin ALL=(root) NOPASSWD: /bin/systemctl stop iss-asi-management-service.service, /bin/systemctl start iss-asi-management-service.service, /bin/systemctl restart iss-asi-management-service.service, /bin/systemctl status iss-asi-legacy.service
# Restart core service
ppadmin ALL=(root) NOPASSWD: /bin/systemctl stop iss-asi-core.service, /bin/systemctl start iss-asi-core.service, /bin/systemctl restart iss-asi-core.service, /bin/systemctl status iss-asi-core.service
# Restart dashboard service
ppadmin ALL=(root) NOPASSWD: /bin/systemctl stop iss-asi-dashboards.service, /bin/systemctl start iss-asi-dashboards.service, /bin/systemctl restart iss-asi-dashboards.service, /bin/systemctl status iss-asi-dashboards.service
Events
/etc/sudoers.d/interlink-events-rules
# Restart events service
ppadmin ALL=(root) NOPASSWD: /bin/systemctl stop iss-asi-events.service, /bin/systemctl start iss-asi-events.service, /bin/systemctl restart iss-asi-events.service, /bin/systemctl status iss-asi-events.service
Datahub
/etc/sudoers.d/interlink-datahub-rules
# Restart asi datahub service
ppadmin ALL=(root) NOPASSWD: /bin/systemctl stop iss-asi-datahub.service, /bin/systemctl start iss-asi-datahub.service, /bin/systemctl restart iss-asi-datahub.service, /bin/systemctl status iss-asi-datahub.service
# Restart datahub service
ppadmin ALL=(root) NOPASSWD: /bin/systemctl stop iss-datahub.service, /bin/systemctl start iss-datahub.service, /bin/systemctl restart iss-datahub.service, /bin/systemctl status iss-datahub.service
Integration Hub
/etc/sudoers.d/interlink-integration-hub-rules
# Restart asi datahub service
ppadmin ALL=(root) NOPASSWD: /bin/systemctl stop iss-integration-hub.service, /bin/systemctl start iss-integration-hub.service, /bin/systemctl restart iss-integration-hub.service, /bin/systemctl status iss-integration-hub.service