Which ambari-server commands MUST be run as root?

[#1]

I am running the Ambari Server in a non-root environment as the ambari user. There are restricted sudo rules in place that limit the commands the ambari user can execute as root. Some of the ambari-server commands, such as adding a JDBC driver, will run as the ambari user. Other commands such as the setup-ldap option require root (sudo is this case) to run. I would rather update the sudo command list at once versus a case-by-case basis.

[#2 · Accepted solution]

Hey @terry@hortonworks.com, please use the following docs for the Ambari Agent sudo commands, but for flexibility sake I would add sudo rights to your non-root user for 'sudo ambari-server' so that future JAAS setup, or reconfiguration will be covered.

http://docs.hortonworks.com/HDPDocuments/Ambari-2.1.2.0/bk_Ambari_Security_Guide/content/_configurin...