We need to review all the actions that can be done after we apply `load-balancer_admin` to nagios. Could nagios delete/create/modify the load-balancer after we apply the role? If yes, then it is not the least-privileged. We can discuss it offline.
Thanks for providing the two links. However, it seems not related the risk if we provide bigger permission to nagios user.
We need to review all the actions that can be done after we apply `load-balancer_ admin` to nagios. Could nagios delete/ create/ modify the load-balancer after we apply the role? If yes, then it is not the least-privileged. We can discuss it offline.
Thanks for providing the two links. However, it seems not related the risk if we provide bigger permission to nagios user.