# What permissions does CircleCI need from the user with SSH key

**URL:** <https://discuss.circleci.com/t/what-permissions-does-circleci-need-from-the-user-with-ssh-key/24700>\
**Category:** Deployments\
**Created:** [August 27, 2018, 6:26pm UTC](https://discuss.circleci.com/t/what-permissions-does-circleci-need-from-the-user-with-ssh-key/24700 "2018-08-27T18:26:40Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![freelensia](https://sea2.discourse-cdn.com/circleci/user_avatar/discuss.circleci.com/freelensia/32/18509_2.png) [@freelensia](https://discuss.circleci.com/u/freelensia)\
**Post date:** [August 27, 2018, 6:26pm UTC](https://discuss.circleci.com/t/what-permissions-does-circleci-need-from-the-user-with-ssh-key/24700/1 "2018-08-27T18:26:40Z")

</div>

Hi,

Our AWS EC2 server runs with SSH. So we need to add the SSH key as instructed here:  
[https://circleci.com/docs/2.0/add-ssh-key/](https://circleci.com/docs/2.0/add-ssh-key/)

The question is we should add the key for WHICH USER?

In other words, that user needs what kind of permissions under visudo for this to work? Is it?  
deploy ALL=(ALL) ALL  
Or something more restrictive is OK? Ideally we want to limit the permissions to avoid potential security issues.

Another concern is that my “teammates” in Circle CI were able to view the content of this key. This seems like a security issue. This key should be viewable by the admin circle ci account only.

Appreciate any opinions you have on the matter.

Duc

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/circleci/original/3X/5/1/511608acda8e85906e15909b57bd0a46c1dbe291.png) [@system](https://discuss.circleci.com/u/system)\
**Post date:** [November 25, 2018, 6:26pm UTC](https://discuss.circleci.com/t/what-permissions-does-circleci-need-from-the-user-with-ssh-key/24700/2 "2018-11-25T18:26:42Z")

</div>

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.