Block users from deleting images in docker registry

Sonatype Nexus Repository
1

I need help restricting some user’s privileges. I have Nexus 3.18 OSS and I am running a docker registry behind a reverse proxy. I would like to create 2 groups of users. The first group can login to the GUI with all permissions on all images (push/pull/delete). The second group can browse and pull images, but cannot delete images. The idea is to only give some users deletion privileges protecting most people from accidentally deleting or overwriting images. Any expert help is appreciated.

2

This can be controlled using roles and privileges. Have a look at these resources:

https://help.sonatype.com/learning/repository-manager-3/security-essentials
https://help.sonatype.com/learn/repository-manager-3/security-model---users%2C-roles%2C-and-privileges

1 Like
3

Thanks, Rich. I was able to get it working.