Roles and permissions

[beermann]

What Roles/Permissions need to be set for the user for Ballista to work?
I do not want to enable full access to the automation user thats gonna run Ballista.

[joeyloman]

Last time I implemented this it was something like this:

hammer role create --name "Content Manager"
hammer filter create --role "Content Manager" --permissions "view_organizations"
hammer filter create --role "Content Manager" --permissions "view_compute_profiles,create_compute_profiles,edit_compute_profiles"
hammer filter create --role "Content Manager" --permissions "view_content_views,create_content_views,publish_content_views,promote_or_remove_content_views,destroy_content_views,edit_content_views"
hammer filter create --role "Content Manager" --permissions "view_lifecycle_environments,promote_or_remove_content_views_to_environments"
hammer filter create --role "Content Manager" --permissions "view_compute_resources,edit_compute_resources"