fleetdm / fleet

Open-source platform for IT, security, and infrastructure teams. (Linux, macOS, Chrome, Windows, cloud, data center)
https://fleetdm.com
Other
3.05k stars 422 forks source link

Self-service scripts #20692

Open ddribeiro opened 2 months ago

ddribeiro commented 2 months ago

Problem

As an IT Admin, I want to be able to add a script to Fleet and designate it as "Self Service," much like I'm able to do with uploading Software today.

What have you tried?

Today, I am able to upload scripts to Fleet, but they can't be triggered by end users.

Potential solutions

When an admin uploads a script to Fleet, there could be a checkbox to designate the script as Self Service. This would mirror the process that exists today for Software.

What is the expected workflow as a result of your proposal?

Self Service scripts is a feature available in other MDM products and the use cases are wide ranging. In general, expected workflows are the same as regular script execution except the user determines when they should be run. **Customer:** As an end user, I want to execute organization-provided scripts on my host, to troubleshoot, remediate issues, or configure my system from a GUI portal. #### Examples: 1. An IT admin can write a script to collect diagnostics for an app. The user can use the self-service script to trigger the collection of diagnostics when they are experiencing the issue. 2. Collect TPM EKPub for escrow to IT asset management platform. 3. Configure `nssdb` to interoperate with a PKCS#11 module.
JoStableford commented 2 months ago

Related to a Slack conversation

nonpunctual commented 2 months ago

related: #17129 Automatically run script on policy failure