Answers.Body: <p>Check out this answer.</p>
  
  <p><a href="https://civicrm.stackexchange.com/questions/21094/safe-to-run-cron-jobs-using-wget-and-user-with-full-admin-rights/21098#21098">Safe to run cron jobs using wget and user with full admin rights?</a></p>
  
  <p>Essentially just give the permissions necessary to run the cron jobs.  If no event crons - don't give event permissions. </p>
  
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2019-02-04T02:08:13.933Z
Answers.LastActivityDate: 2019-02-04T02:08:13.933Z
Answers.UserDisplayName: themak
Body: <p>In the interest of creating minimal permission sets for automated users, what are these for the cron user? If the cron is being run via drush, what are the minimum Civi permissions it can get away with? If a scheduled job requires permissions to execute (e.g., contact create) does the automated user need these too?</p>
  
  <p>[This may seem like a pointless question: if there's a Cron User, and its credentials just live on the host machine, why would this be necessary? If they have the host machine, they have the host machine, right? Well, usernames can be guessed, passwords can be cracked over time, and best practice is best practice.]</p>
  
Tags: <security><gdpr>
Title: What are the minimum permissions for Cron User?
ThreadText: # What are the minimum permissions for Cron User?
  
  (Asked by: username_0 on 2019-02-04)
  
  In the interest of creating minimal permission sets for automated users, what are these for the cron user? If the cron is being run via drush, what are the minimum Civi permissions it can get away with? If a scheduled job requires permissions to execute (e.g., contact create) does the automated user need these too?
  
  [This may seem like a pointless question: if there's a Cron User, and its credentials just live on the host machine, why would this be necessary? If they have the host machine, they have the host machine, right? Well, usernames can be guessed, passwords can be cracked over time, and best practice is best practice.]
  
  **Tags:** security, gdpr
  
  
  ---
  
  ## 1 answers
  
  ### Answer by username_1 on 2019-02-04. Score: 1
  
  Check out this answer.
  
  [Safe to run cron jobs using wget and user with full admin rights?](https://civicrm.stackexchange.com/questions/21094/safe-to-run-cron-jobs-using-wget-and-user-with-full-admin-rights/21098#21098)
  
  Essentially just give the permissions necessary to run the cron jobs. If no event crons - don't give event permissions.
  
  
  ---
  
  