{"id":64177,"date":"2025-03-12T11:42:28","date_gmt":"2025-03-12T11:42:28","guid":{"rendered":"https:\/\/www.n-able.com\/?p=64177"},"modified":"2025-03-13T13:56:27","modified_gmt":"2025-03-13T13:56:27","slug":"streamlining-n-central-agent-installation-minimum-permissions-required","status":"publish","type":"post","link":"https:\/\/www.n-able.com\/it\/blog\/streamlining-n-central-agent-installation-minimum-permissions-required","title":{"rendered":"Streamlining N‑central Agent Installation: Minimum Permissions Required"},"content":{"rendered":"

When it comes to scripting the install of the N‑able N‑central agent, one of the most common questions I\u2019m asked is: what are minimum permissions needed to carry out this task?\u00a0 <\/span><\/p>\n

Well it took some testing, but I\u2019ve managed to get a definitive answer and despite all the permissions available to a user in N‑central you might be surprised to learn that in total you only need three. So in this blog I\u2019m going to outline exactly what you need if you wish to configure a restricted role in N‑central for this purpose. <\/span><\/p>\n

Creating a Restricted User Role<\/strong><\/h2>\n

First up, we are going to create a new User Role so that we can assign the relevant permissions. From the SO level navigate to Administration>User Management and click on Roles in the left-hand navigation menu. Here you will see the current user roles available on your N‑central server. Click on Create Role, then provide a name for this role as well as a description so that other N‑central users can understand the purpose of this user role. I\u2019d suggest something along the lines of \u201cLocked down user role used with minimum access to trigger the agent install\u201d.\u00a0 It\u2019s always good practice to be as descriptive as possible when it comes to naming and descriptions of anything in N‑central. <\/span><\/p>\n

\"\" \u00a0<\/span><\/p>\n

Configuring the Necessary Permissions<\/strong><\/h2>\n

With the name and description set the next step is to set the permissions you need. I\u2019m going to include a few screenshots here to so you can see what exactly is required. For starters no permissions are required in the Administration, Reporting, and Tickets & Notifications sections, so everything in those sections can be set to None.\u00a0<\/span><\/p>\n

Scroll down to the Configuration section. In here the very first option you will see is Discovery Jobs under Asset Discovery, this is the first of the three permissions you need. From the Discovery Jobs dropdown menu, ensure that the value selected is Manage, by default everything in the new role should be set to None, so you will need to change this.<\/span><\/p>\n

\"\"<\/span><\/p>\n

Once you have configured the Discovery Jobs permission under configuration, the other two permissions you need to set are in the Devices section.\u00a0 The second permission you need to set is the All Devices permission under Devices View. Here you will only have the option to set this to Read Only, so ensure that is selected from the dropdown.<\/span><\/p>\n

The third and final permission you need to set is the Add\/Import Devices permission under Network Devices. Just like the first permission you select Manage from the dropdown menu here as well.<\/span><\/p>\n

\"\"<\/span><\/strong><\/p>\n

Applying the Role and Enhancing Security<\/strong><\/h2>\n

Once these three permissions are configured, save the role. This new role can now be assigned to a user instead of a broader, more privileged role. You can also create an API-only user account<\/strong> with this restricted role and use it within your deployment scripts to install the N‑central agent securely.<\/span><\/p>\n

By leveraging least privilege access<\/strong>, you\u2019re enhancing security for both yourself and your customers. Limiting user permissions<\/a> ensures that only the necessary actions can be performed, reducing potential risks.<\/span><\/p>\n

Need Help?<\/strong><\/h2>\n

If you have any questions about this process, or anything else related to N‑central, feel free to reach out to me directly. My contact details are below. Also, don\u2019t forget to join me each month for N‑central Office Hours<\/strong>, where I\u2019ll be joined by a special guest Product Manager to discuss the latest updates and best practices. See you there!<\/span><\/p>\n

\u00a0Paul Kelly is the Head Nerd at N\u2011able. You can follow him on Twitter at\u00a0<\/em>@HeadNerdPaul<\/em><\/a><\/span>,\u00a0<\/em>LinkedIn<\/em><\/a><\/span>\u00a0and Reddit at\u00a0<\/em>u\/Paul _Kelly<\/em><\/a><\/span>. Alternatively you can\u00a0<\/em>email me direct<\/em><\/a><\/span>.<\/em><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

In this blog, Paul Kelly discusses the essential permissions for scripting the N-able N-central agent install and how to set up a restricted role for it<\/p>\n","protected":false},"author":95,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"class_list":["post-64177","post","type-post","status-publish","format-standard","hentry","topic-head-nerds"],"acf":[],"yoast_head":"\nStreamlining N-central Agent Installation: Minimum Permissions Required - N-able<\/title>\n<meta name=\"description\" content=\"Paul Kelly discusses the essential permissions for scripting the N-able N-central agent install and how to set up a restricted role for it.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.n-able.com\/it\/blog\/streamlining-n-central-agent-installation-minimum-permissions-required\" \/>\n<meta property=\"og:locale\" content=\"it_IT\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Streamlining N-central Agent Installation: Minimum Permissions Required - N-able\" \/>\n<meta property=\"og:description\" content=\"Paul Kelly discusses the essential permissions for scripting the N-able N-central agent install and how to set up a restricted role for it.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.n-able.com\/it\/blog\/streamlining-n-central-agent-installation-minimum-permissions-required\" \/>\n<meta property=\"og:site_name\" content=\"N-able\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/NableMSP\" \/>\n<meta property=\"article:published_time\" content=\"2025-03-12T11:42:28+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-03-13T13:56:27+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.n-able.com\/wp-content\/uploads\/2025\/03\/031325_BB_HN-NC-Agent-Installation_PD_Final_1200x628-scaled.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1340\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Paul Kelly\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@Nable\" \/>\n<meta name=\"twitter:site\" content=\"@Nable\" \/>\n<meta name=\"twitter:label1\" content=\"Scritto da\" \/>\n\t<meta name=\"twitter:data1\" content=\"Paul Kelly\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tempo di lettura stimato\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minuti\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.n-able.com\/it\/blog\/streamlining-n-central-agent-installation-minimum-permissions-required#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.n-able.com\/it\/blog\/streamlining-n-central-agent-installation-minimum-permissions-required\"},\"author\":{\"name\":\"Paul Kelly\",\"@id\":\"https:\/\/www.n-able.com\/it\/#\/schema\/person\/b314d1740d99089064deb1b842afe108\"},\"headline\":\"Streamlining N‑central Agent Installation: Minimum Permissions Required\",\"datePublished\":\"2025-03-12T11:42:28+00:00\",\"dateModified\":\"2025-03-13T13:56:27+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.n-able.com\/it\/blog\/streamlining-n-central-agent-installation-minimum-permissions-required\"},\"wordCount\":630,\"publisher\":{\"@id\":\"https:\/\/www.n-able.com\/it\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.n-able.com\/it\/blog\/streamlining-n-central-agent-installation-minimum-permissions-required#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.n-able.com\/wp-content\/uploads\/2025\/03\/Image1.jpg\",\"inLanguage\":\"it-IT\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.n-able.com\/it\/blog\/streamlining-n-central-agent-installation-minimum-permissions-required\",\"url\":\"https:\/\/www.n-able.com\/it\/blog\/streamlining-n-central-agent-installation-minimum-permissions-required\",\"name\":\"Streamlining N-central Agent Installation: Minimum Permissions Required - N-able\",\"isPartOf\":{\"@id\":\"https:\/\/www.n-able.com\/it\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.n-able.com\/it\/blog\/streamlining-n-central-agent-installation-minimum-permissions-required#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.n-able.com\/it\/blog\/streamlining-n-central-agent-installation-minimum-permissions-required#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.n-able.com\/wp-content\/uploads\/2025\/03\/Image1.jpg\",\"datePublished\":\"2025-03-12T11:42:28+00:00\",\"dateModified\":\"2025-03-13T13:56:27+00:00\",\"description\":\"Paul Kelly discusses the essential permissions for scripting the N-able N-central agent install and how to set up a restricted role for it.\",\"inLanguage\":\"it-IT\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.n-able.com\/it\/blog\/streamlining-n-central-agent-installation-minimum-permissions-required\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\/\/www.n-able.com\/it\/blog\/streamlining-n-central-agent-installation-minimum-permissions-required#primaryimage\",\"url\":\"https:\/\/www.n-able.com\/wp-content\/uploads\/2025\/03\/Image1.jpg\",\"contentUrl\":\"https:\/\/www.n-able.com\/wp-content\/uploads\/2025\/03\/Image1.jpg\"},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.n-able.com\/it\/#website\",\"url\":\"https:\/\/www.n-able.com\/it\/\",\"name\":\"N-able\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/www.n-able.com\/it\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.n-able.com\/it\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"it-IT\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.n-able.com\/it\/#organization\",\"name\":\"N-able\",\"url\":\"https:\/\/www.n-able.com\/it\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\/\/www.n-able.com\/it\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.n-able.com\/wp-content\/uploads\/2021\/02\/logo-n-able-vertical-dark.svg\",\"contentUrl\":\"https:\/\/www.n-able.com\/wp-content\/uploads\/2021\/02\/logo-n-able-vertical-dark.svg\",\"width\":\"1024\",\"height\":\"1024\",\"caption\":\"N-able\"},\"image\":{\"@id\":\"https:\/\/www.n-able.com\/it\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/NableMSP\",\"https:\/\/x.com\/Nable\",\"https:\/\/www.linkedin.com\/company\/n-able\",\"https:\/\/www.youtube.com\/channel\/UClnp77HHg4aME-S-3fWQhFw\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.n-able.com\/it\/#\/schema\/person\/b314d1740d99089064deb1b842afe108\",\"name\":\"Paul Kelly\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/5eb43befb5968c33993074c123ae2d65fe5fd7bc9b1856586f8cb3a366c6bc65?s=96&d=mm&r=g\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/5eb43befb5968c33993074c123ae2d65fe5fd7bc9b1856586f8cb3a366c6bc65?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/5eb43befb5968c33993074c123ae2d65fe5fd7bc9b1856586f8cb3a366c6bc65?s=96&d=mm&r=g\",\"caption\":\"Paul Kelly\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Streamlining N-central Agent Installation: Minimum Permissions Required - N-able","description":"Paul Kelly discusses the essential permissions for scripting the N-able N-central agent install and how to set up a restricted role for it.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.n-able.com\/it\/blog\/streamlining-n-central-agent-installation-minimum-permissions-required","og_locale":"it_IT","og_type":"article","og_title":"Streamlining N-central Agent Installation: Minimum Permissions Required - N-able","og_description":"Paul Kelly discusses the essential permissions for scripting the N-able N-central agent install and how to set up a restricted role for it.","og_url":"https:\/\/www.n-able.com\/it\/blog\/streamlining-n-central-agent-installation-minimum-permissions-required","og_site_name":"N-able","article_publisher":"https:\/\/www.facebook.com\/NableMSP","article_published_time":"2025-03-12T11:42:28+00:00","article_modified_time":"2025-03-13T13:56:27+00:00","og_image":[{"width":2560,"height":1340,"url":"https:\/\/www.n-able.com\/wp-content\/uploads\/2025\/03\/031325_BB_HN-NC-Agent-Installation_PD_Final_1200x628-scaled.jpg","type":"image\/jpeg"}],"author":"Paul Kelly","twitter_card":"summary_large_image","twitter_creator":"@Nable","twitter_site":"@Nable","twitter_misc":{"Scritto da":"Paul Kelly","Tempo di lettura stimato":"4 minuti"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.n-able.com\/it\/blog\/streamlining-n-central-agent-installation-minimum-permissions-required#article","isPartOf":{"@id":"https:\/\/www.n-able.com\/it\/blog\/streamlining-n-central-agent-installation-minimum-permissions-required"},"author":{"name":"Paul Kelly","@id":"https:\/\/www.n-able.com\/it\/#\/schema\/person\/b314d1740d99089064deb1b842afe108"},"headline":"Streamlining N‑central Agent Installation: Minimum Permissions Required","datePublished":"2025-03-12T11:42:28+00:00","dateModified":"2025-03-13T13:56:27+00:00","mainEntityOfPage":{"@id":"https:\/\/www.n-able.com\/it\/blog\/streamlining-n-central-agent-installation-minimum-permissions-required"},"wordCount":630,"publisher":{"@id":"https:\/\/www.n-able.com\/it\/#organization"},"image":{"@id":"https:\/\/www.n-able.com\/it\/blog\/streamlining-n-central-agent-installation-minimum-permissions-required#primaryimage"},"thumbnailUrl":"https:\/\/www.n-able.com\/wp-content\/uploads\/2025\/03\/Image1.jpg","inLanguage":"it-IT"},{"@type":"WebPage","@id":"https:\/\/www.n-able.com\/it\/blog\/streamlining-n-central-agent-installation-minimum-permissions-required","url":"https:\/\/www.n-able.com\/it\/blog\/streamlining-n-central-agent-installation-minimum-permissions-required","name":"Streamlining N-central Agent Installation: Minimum Permissions Required - N-able","isPartOf":{"@id":"https:\/\/www.n-able.com\/it\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.n-able.com\/it\/blog\/streamlining-n-central-agent-installation-minimum-permissions-required#primaryimage"},"image":{"@id":"https:\/\/www.n-able.com\/it\/blog\/streamlining-n-central-agent-installation-minimum-permissions-required#primaryimage"},"thumbnailUrl":"https:\/\/www.n-able.com\/wp-content\/uploads\/2025\/03\/Image1.jpg","datePublished":"2025-03-12T11:42:28+00:00","dateModified":"2025-03-13T13:56:27+00:00","description":"Paul Kelly discusses the essential permissions for scripting the N-able N-central agent install and how to set up a restricted role for it.","inLanguage":"it-IT","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.n-able.com\/it\/blog\/streamlining-n-central-agent-installation-minimum-permissions-required"]}]},{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/www.n-able.com\/it\/blog\/streamlining-n-central-agent-installation-minimum-permissions-required#primaryimage","url":"https:\/\/www.n-able.com\/wp-content\/uploads\/2025\/03\/Image1.jpg","contentUrl":"https:\/\/www.n-able.com\/wp-content\/uploads\/2025\/03\/Image1.jpg"},{"@type":"WebSite","@id":"https:\/\/www.n-able.com\/it\/#website","url":"https:\/\/www.n-able.com\/it\/","name":"N-able","description":"","publisher":{"@id":"https:\/\/www.n-able.com\/it\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.n-able.com\/it\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"it-IT"},{"@type":"Organization","@id":"https:\/\/www.n-able.com\/it\/#organization","name":"N-able","url":"https:\/\/www.n-able.com\/it\/","logo":{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/www.n-able.com\/it\/#\/schema\/logo\/image\/","url":"https:\/\/www.n-able.com\/wp-content\/uploads\/2021\/02\/logo-n-able-vertical-dark.svg","contentUrl":"https:\/\/www.n-able.com\/wp-content\/uploads\/2021\/02\/logo-n-able-vertical-dark.svg","width":"1024","height":"1024","caption":"N-able"},"image":{"@id":"https:\/\/www.n-able.com\/it\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/NableMSP","https:\/\/x.com\/Nable","https:\/\/www.linkedin.com\/company\/n-able","https:\/\/www.youtube.com\/channel\/UClnp77HHg4aME-S-3fWQhFw"]},{"@type":"Person","@id":"https:\/\/www.n-able.com\/it\/#\/schema\/person\/b314d1740d99089064deb1b842afe108","name":"Paul Kelly","image":{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/secure.gravatar.com\/avatar\/5eb43befb5968c33993074c123ae2d65fe5fd7bc9b1856586f8cb3a366c6bc65?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/5eb43befb5968c33993074c123ae2d65fe5fd7bc9b1856586f8cb3a366c6bc65?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/5eb43befb5968c33993074c123ae2d65fe5fd7bc9b1856586f8cb3a366c6bc65?s=96&d=mm&r=g","caption":"Paul Kelly"}}]}},"_links":{"self":[{"href":"https:\/\/www.n-able.com\/it\/wp-json\/wp\/v2\/posts\/64177","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.n-able.com\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.n-able.com\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.n-able.com\/it\/wp-json\/wp\/v2\/users\/95"}],"replies":[{"embeddable":true,"href":"https:\/\/www.n-able.com\/it\/wp-json\/wp\/v2\/comments?post=64177"}],"version-history":[{"count":0,"href":"https:\/\/www.n-able.com\/it\/wp-json\/wp\/v2\/posts\/64177\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.n-able.com\/it\/wp-json\/wp\/v2\/media?parent=64177"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}