From 1ae0b6a4d69e3daa14ceac107c22fa904b9358f1 Mon Sep 17 00:00:00 2001 From: Mark Harrison Date: Wed, 2 Sep 2026 14:10:46 +0100 Subject: [PATCH] Clarify ConfigureServer permission required for Connection Agent API key --- src/pages/docs/octopus-cloud/connection-agent.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/pages/docs/octopus-cloud/connection-agent.md b/src/pages/docs/octopus-cloud/connection-agent.md index fbdb352ea1..63f5bc4b72 100644 --- a/src/pages/docs/octopus-cloud/connection-agent.md +++ b/src/pages/docs/octopus-cloud/connection-agent.md @@ -1,7 +1,7 @@ --- layout: src/layouts/Default.astro pubDate: 2026-05-21 -modDate: 2026-07-20 +modDate: 2026-09-02 title: Connection Agent navOrder: 67 description: How to set up and manage a Connection Agent to connect your Octopus Cloud instance to privately hosted internal applications @@ -64,7 +64,7 @@ By default, you can register up to 5 Connection Agents per instance. [Contact ou **IMPORTANT - Protect your Private Key:** The generated `.pem` file is your private key and must be kept secret. It lets Connection Agent authenticate and proxy requests from Octopus Cloud. If the private key is compromised, immediately [rotate your private key](#rotate-the-agents-key). ::: -1. [Create an API key](https://octopus.com/docs/api/authentication/create-an-api-key) with a short expiry date on your Octopus Cloud instance. This API key will only be used to register the Connection Agent. +1. [Create an API key](https://octopus.com/docs/api/authentication/create-an-api-key) with a short expiry date on your Octopus Cloud instance. This API key will only be used to register the Connection Agent, and must have `ConfigureServer` permission (the same permission required for all Connection Agent actions - see [Prerequisites](#prerequisites)). 1. Register the Connection Agent with your Octopus Cloud instance. This command doesn't need to be run on the same infrastructure you intend to run the Connection Agent on.