From fc3e730329d843c75811f1b1eed1993921e21e0d Mon Sep 17 00:00:00 2001
From: Patrick Andrieux <31440210+pandrieux@users.noreply.github.com>
Date: Fri, 8 Dec 2023 08:37:16 +0100
Subject: [PATCH] Fixes #27290 - allow foreman to delete host having
 certificate

---
 sbin/foreman-prepare-realm | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/sbin/foreman-prepare-realm b/sbin/foreman-prepare-realm
index 4105268ce..22fe44af3 100755
--- a/sbin/foreman-prepare-realm
+++ b/sbin/foreman-prepare-realm
@@ -59,7 +59,8 @@ else
     --permission='System: Manage Host Certificates' --permission='System: Modify Hosts' --permission='System: Remove Hosts' \
     --permission='System: Manage Host Keytab' --permission='Retrieve Certificates from the CA' --permission='System: Modify Services' \
     --permission='System: Manage Service Keytab' --permission='System: Add DNS Entries' --permission='System: Update DNS Entries' \
-    --permission='System: Remove DNS Entries' --permission='System: Read DNS Entries' --permission='Add Host Enrollment Password'
+    --permission='System: Remove DNS Entries' --permission='System: Read DNS Entries' --permission='Add Host Enrollment Password' \
+    --permission='Revoke Certificate' --permission='System: Remove Services'
 fi
 
 ipa role-add 'Smart Proxy Host Manager' --desc='Smart Proxy management'