# User Permission to Run c8ycli deploy

**URL:** <https://community.cumulocity.com/t/user-permission-to-run-c8ycli-deploy/3921>\
**Category:** Forum\
**Tags:** CLI, c8y, cumulocity\
**Created:** [September 6, 2024, 11:16pm UTC](https://community.cumulocity.com/t/user-permission-to-run-c8ycli-deploy/3921 "2024-09-06T23:16:28Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![leonard\_chu](https://avatars.discourse-cdn.com/v4/letter/l/a9adbd/32.png) [@leonard\_chu](https://community.cumulocity.com/u/leonard_chu)\
**Post date:** [September 6, 2024, 11:16pm UTC](https://community.cumulocity.com/t/user-permission-to-run-c8ycli-deploy/3921/1 "2024-09-06T23:16:28Z")

</div>

Product: Cumulocity CLI (npm install -g @c8y/cli), version 1018.0.240

Could we please ask what the minimum required set of user permission is to run “c8ycli deploy”?  
We can’t seem to find documentation for this information.

---

<div class="post-metadata">

**Author:** ![Tristan\_Bastian](https://dub1.discourse-cdn.com/flex005/user_avatar/community.cumulocity.com/tristan_bastian/32/18259_2.png) [@Tristan\_Bastian](https://community.cumulocity.com/u/Tristan_Bastian)\
**Post date:** [September 9, 2024, 6:25am UTC](https://community.cumulocity.com/t/user-permission-to-run-c8ycli-deploy/3921/2 "2024-09-09T06:25:00Z")

</div>

Hi @leonard_chu,

The @c8y/cli uses the endpoints for creating/updating/listing applications ([Cumulocity - OpenAPI](https://cumulocity.com/api/core/#tag/Applications)).  
It therefore needs the `ROLE_APPLICATION_MANAGEMENT_READ` and `ROLE_APPLICATION_MANAGEMENT_ADMIN` permissions.

Note that the `ROLE_APPLICATION_MANAGEMENT_ADMIN` is one of the most powerful permissions that you can have, as it allows you to upload microservices, which can get all permissions defined in their microservice manifest.

Regards,  
Tristan

---

<div class="post-metadata">

**Author:** ![leonard\_chu](https://avatars.discourse-cdn.com/v4/letter/l/a9adbd/32.png) [@leonard\_chu](https://community.cumulocity.com/u/leonard_chu)\
**Post date:** [September 9, 2024, 11:48pm UTC](https://community.cumulocity.com/t/user-permission-to-run-c8ycli-deploy/3921/3 "2024-09-09T23:48:59Z")

</div>

Hi Tristan,

Thanks for providing the details.

If I want to create a user with the right to run `c8ycli deploy`, which roles should I assign to this user?

 ![image](https://europe1.discourse-cdn.com/flex005/uploads/cumulocity/original/3X/0/5/051736559f9d1e1c5c35b87a149fd86058ce89c2.png)

---

<div class="post-metadata">

**Author:** ![Tristan\_Bastian](https://dub1.discourse-cdn.com/flex005/user_avatar/community.cumulocity.com/tristan_bastian/32/18259_2.png) [@Tristan\_Bastian](https://community.cumulocity.com/u/Tristan_Bastian)\
**Post date:** [September 10, 2024, 6:32am UTC](https://community.cumulocity.com/t/user-permission-to-run-c8ycli-deploy/3921/4 "2024-09-10T06:32:30Z")

</div>

Hi @leonard_chu,

You could use the predefined `Admin User` global role, but this would also give you more permissions…

In case you really want to limit the permissions to what you actually need, I would suggest to create a new global role and granting that role only the Application management read & admin permission:

 ![image](https://europe1.discourse-cdn.com/flex005/uploads/cumulocity/original/3X/a/d/adedc6a6024b41c178395e2dbac038fbf3e34e7a.png)  
You can then assign this global role to your user.

Regards,  
Tristan

---

<div class="post-metadata">

**Author:** ![leonard\_chu](https://avatars.discourse-cdn.com/v4/letter/l/a9adbd/32.png) [@leonard\_chu](https://community.cumulocity.com/u/leonard_chu)\
**Post date:** [September 10, 2024, 6:44am UTC](https://community.cumulocity.com/t/user-permission-to-run-c8ycli-deploy/3921/5 "2024-09-10T06:44:09Z")

</div>

Hi Tristan,

Awesome. Thanks very much for your help!

---

<div class="post-metadata">

**Author:** ![system](https://dub1.discourse-cdn.com/flex005/user_avatar/community.cumulocity.com/system/32/31990_2.png) [@system](https://community.cumulocity.com/u/system)\
**Post date:** [March 9, 2025, 6:44am UTC](https://community.cumulocity.com/t/user-permission-to-run-c8ycli-deploy/3921/6 "2025-03-09T06:44:57Z")

</div>

This topic was automatically closed 180 days after the last reply. New replies are no longer allowed.