Managing Users and Permissions

curl -X POST "http://jenkins.example.com/securityRealm/createAccount" \
  -d "username=john_doe" \
  -d "password1=securePassword123" \
  -d "password2=securePassword123" \
  -d "full_name=John Doe" \
  -d "email=john.doe@example.com"

import jenkins.model.Jenkins
import hudson.security.*

def jenkins = Jenkins.getInstance()
def user = jenkins.getUser("john_doe")
def roleMap = new RoleMap()

// Assign global role
roleMap.assignRole(new GlobalMatrixAuthorizationStrategy(), "admin", "john_doe")

// Save changes
jenkins.save()

1. Go to Jenkins Dashboard
2. Navigate to "Manage Jenkins" > "Manage Users"
3. Select a user and click "Assign Roles"
4. Choose roles from the list (e.g., Admin, Read-only User)
5. Save changes

# Navigate to Jenkins Dashboard
# Go to Manage Jenkins > Manage Users
# Select a user or group
# Click on "Assign Roles"
# Assign roles like "Admin", "Build User", etc.

import jenkins.model.*
import hudson.security.*

def jenkins = Jenkins.getInstance()
def acl = jenkins.getAuthorizationStrategy()

// Example: Granting 'hudson.model.Item.Read' to a user
def user = jenkins.getUser("john_doe")
def permission = hudson.model.Item.READ

// Apply the permission to the user
acl.add(permission, user)

1. Navigate to "Manage Jenkins" > "Manage Users"
2. Click on "Create Group"
3. Enter group name (e.g., "Developers")
4. Add members to the group
5. Save changes

curl -u "username:password" "http://jenkins-url/user/username/apiToken" --data "newToken=Generate+New+Token"

withCredentials([string(credentialsId: 'jenkins-api-token', variable: 'API_TOKEN')]) {
    sh "curl -H 'Authorization: Bearer $API_TOKEN' http://jenkins-url/api/json"
}

curl -X POST "http://jenkins.example.com/job/my-job/permission/build" \
  -u "admin:password" \
  --data-urlencode "user=alice" \
  --data-urlencode "permission=BUILD"

1. Go to the job configuration page.
2. Navigate to "Security" section.
3. Select "Enable project-based matrix authorization strategy".
4. Add users or groups and assign appropriate permissions.

// Groovy script to configure matrix authorization
import jenkins.model.Jenkins
import hudson.security.*

def jenkins = Jenkins.getInstance()
def securityRealm = new HudsonPrivateSecurityRealm(false)
def authorizationStrategy = new GlobalMatrixAuthorizationStrategy()

// Add user permissions
authorizationStrategy.add(Jenkins.READ, "user1")
authorizationStrategy.add(Job.BUILD, "user2")
authorizationStrategy.add(Job.CONFIGURE, "user3")

// Apply the strategy
jenkins.setAuthorizationStrategy(authorizationStrategy)
jenkins.save()

import jenkins.model.Jenkins

def jenkins = Jenkins.getInstance()
jenkins.setSecurityRealm(new hudson.security.HudsonPrivateSecurityRealm(false))
jenkins.setAuthorizationStrategy(new hudson.security.AuthorizationStrategy.Unsecured())
jenkins.save()

// Jenkins Script Console or Groovy Post-Build Step
import jenkins.model.Jenkins
import hudson.security.AuthorizationStrategy
import org.acegisecurity.providers.dao.DaoAuthenticationProvider

def jenkins = Jenkins.instance
def auditLog = new File("/var/log/jenkins/audit.log")

// Enable audit logging
jenkins.setAuditLogEnabled(true)
jenkins.setAuditLogFile(auditLog)

// Configure log format (example)
jenkins.setAuditLogFormat("{user} performed {action} on {resource}")