I think you cannot do it properly using the project-based authorization strategy. But you should be able to do it with the combination of the following two plugins: https://wiki.jenkins.io/display/JENKINS/Ownership+Plugin https://wiki.jenkins.io/display/JENKINS/Role+Strategy+Plugin
I have only recently become aware of this plugin combination and started playing around with it. So if you are willing to change your security model then the best is to look at the documentation. See the section "Restricting executions on agents" from the following: https://github.com/jenkinsci/ownership-plugin/blob/master/doc/OwnershipBasedSecurity.md Cheers Artur ________________________________________ From: jenkinsci-users@googlegroups.com <jenkinsci-users@googlegroups.com> on behalf of Jason LeMauk <jason.lem...@csquaredsystems.com> Sent: 11 July 2017 20:41:23 To: jenkinsci-users@googlegroups.com Subject: Jenkins Distributed Builds: Restricting users from configuring jobs with Jenkins Master's executors I currently have a distributed build system in place (1 Jenkins master and several Jenkins Agents). I have an automated backup / backup cleanup job that runs on Jenkins Master. For this reason I need to keep my executors on the Jenkins Master. The rest of my jobs run on specific Jenkins Agents. As I cannot remove my executors from the Jenkins Master, what is the best way to ensure that no other jobs can be built on Jenkins Master? I am using project-based authorization strategy, and I don’t want a team member who may configure a job selecting the Jenkins Master to build on. What is the best way to go about achieving this? Thanks in advance for any guidance and advice! -- You received this message because you are subscribed to the Google Groups "Jenkins Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-users+unsubscr...@googlegroups.com<mailto:jenkinsci-users+unsubscr...@googlegroups.com>. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/BY2PR12MB059992ED76D9D6B99481DD7F89AE0%40BY2PR12MB0599.namprd12.prod.outlook.com<https://groups.google.com/d/msgid/jenkinsci-users/BY2PR12MB059992ED76D9D6B99481DD7F89AE0%40BY2PR12MB0599.namprd12.prod.outlook.com?utm_medium=email&utm_source=footer>. For more options, visit https://groups.google.com/d/optout. -- You received this message because you are subscribed to the Google Groups "Jenkins Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/bc714dc405924475820d5db4efe20db4%40partner.eso.org. For more options, visit https://groups.google.com/d/optout.
