Hi Chad, We are creating these template yaml files inside our BitBucket and we have a job within GoCD to convert the template yaml to json format and then pass it to the API call to create a template.
Initially we created a template from the console and we fetched the json template using the API and then we converted that to yaml and started using the same yaml format for all the templates. That’s how we got this syntax for the template. Regards, Shwetha On Tue, Sep 9, 2025 at 2:02 PM Chad Wilson <[email protected]> wrote: > Which plugin are you using to specify your pipelines? That syntax doesn't > look valid for the GoCD Yaml plugin, so it's a bit hard to determine what > is happening. > > The permissions on an individual stage *should* overwrite anything from > the pipeline group (as specified via the GoCD UI configuration) so what you > are trying to do should be possible, so there is possibly an issue with > your syntax. > > Normally with the YAML plugin the syntax would look like the below, according > to the docs > <https://github.com/tomzo/gocd-yaml-config-plugin?tab=readme-ov-file#approval> > . > approval: > type: success > allow_only_on_success: false > roles: > - dev > - qa > users: [] > > -Chad > > On Tue, 9 Sept 2025 at 15:50, SHWETHA H R <[email protected]> > wrote: > >> Hello, >> >> We are trying to restrict users from triggering all the stages in a GoCD >> pipeline. We tried adding permission within the templates like below: >> approval: >> type: success >> allow_only_on_success: false >> authorization: >> roles: >> - dev >> - qa >> users: [] >> >> This is forcing us to add operate permission on the pipeline groups for >> both qa and dev roles. If we add operate permission, then dev and qa groups >> are able to trigger any stage even though there is a restriction within the >> template stage permissions. >> >> Please let me know if there is a way where we can restrict users to >> trigger only the required stages without giving operate access on the >> pipeline group. >> >> Thank you, >> Shwetha >> >> >> -- >> You received this message because you are subscribed to the Google Groups >> "GoCD Users" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To view this discussion visit >> https://groups.google.com/d/msgid/go-cd/CALFHbX%2Bt-9wWiAhfwzRUvB2tW41M5eO6U92upF6AxuinJjWqfw%40mail.gmail.com >> <https://groups.google.com/d/msgid/go-cd/CALFHbX%2Bt-9wWiAhfwzRUvB2tW41M5eO6U92upF6AxuinJjWqfw%40mail.gmail.com?utm_medium=email&utm_source=footer> >> . >> > -- > You received this message because you are subscribed to the Google Groups > "GoCD Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion visit > https://groups.google.com/d/msgid/go-cd/CAEe7TByCZxMRGP_ANMHs-%2Bjs-2pT2RrcRra-2L%3D%2BisWqKiY85g%40mail.gmail.com > <https://groups.google.com/d/msgid/go-cd/CAEe7TByCZxMRGP_ANMHs-%2Bjs-2pT2RrcRra-2L%3D%2BisWqKiY85g%40mail.gmail.com?utm_medium=email&utm_source=footer> > . > -- You received this message because you are subscribed to the Google Groups "GoCD Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion visit https://groups.google.com/d/msgid/go-cd/CALFHbXKmt%3D6%3D5_LFPJz1jWiOe2JpOPq2Jf3zQEOx8BB8i922NQ%40mail.gmail.com.
