Skip to content

Commit 579673e

Browse files
committed
Fix mistakes in Jira Access Request plugin guide (#67017)
In #65190, we inadvertently introduced two small issues, which this change fixes: - Remove a reference to a nonexistent role. This was a mistake due to a find/replace operation. - Add full permissions to the access-plugin-update role. The Jira Access Request plugin needs to list and read `access_plugin_data`, not just create it.
1 parent 63aae80 commit 579673e

1 file changed

Lines changed: 3 additions & 4 deletions

File tree

  • docs/pages/identity-governance/access-requests/plugins

docs/pages/identity-governance/access-requests/plugins/jira.mdx

Lines changed: 3 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -71,9 +71,8 @@ your Teleport cluster.
7171

7272
## Step 2/8. Define a Teleport Jira plugin user
7373

74-
The required permissions for the plugin are configured in the preset
75-
`access-plugin-update` role. To generate credentials for the plugin, define
76-
either a Machine ID bot user or a regular Teleport user.
74+
To generate credentials for the plugin, define either a Machine ID bot user or a
75+
regular Teleport user.
7776

7877
<Tabs>
7978
<TabItem label="Machine & Workload Identity">
@@ -97,7 +96,7 @@ spec:
9796
- resources: ['access_request']
9897
verbs: ['list', 'read', 'update']
9998
- resources: ['access_plugin_data']
100-
verbs: ['update']
99+
verbs: ['list', 'read', 'update']
101100
```
102101
103102
Create the role:

0 commit comments

Comments
 (0)