ansible / awx

AWX provides a web-based user interface, REST API, and task engine built on top of Ansible. It is one of the upstream projects for Red Hat Ansible Automation Platform.
Other
14.09k stars 3.43k forks source link

Nested Teams #10894

Open DrackThor opened 3 years ago

DrackThor commented 3 years ago
ISSUE TYPE
SUMMARY

currently using AWX 19.2.2

I would love to see the possibility to create nested teams. Meaning to be able to assign the member/admin/read role of one team to another team. There is already an UI option to assign a team-role to certain/multiple users, but I would love to have that for teams as well. For adding users to a team-role I would click: "Access"->"Teams"->"select team"->"Access"->"Add"->"fill out the dialog". This dialog should also contain the option to assign roles to "Team(s)". According to the API, as I understand it, there is already an option to do this - ".related.teams":

{
    "id": 134,
    "type": "role",
    "url": "/api/v2/roles/134/",
    "related": {
        "users": "/api/v2/roles/134/users/",
        "teams": "/api/v2/roles/134/teams/",
        "team": "/api/v2/teams/1/"
    },
    "summary_fields": {
        "resource_name": "Awsome-Team",
        "resource_type": "team",
        "resource_type_display_name": "Team",
        "resource_id": 1
    },
    "name": "Admin",
    "description": "Can manage all aspects of the team"
}

As I understand it, this functionality could be added to the UI by adding a "Teams" option in the "Access"->"Add" dialog. If this feature was already requested, please excuse me requesting it again - I could not find any information on that.

Thanks and BR

wenottingham commented 3 years ago

I know there's some vestigial code about team/team permissions (cc @AlanCoding ).

However, I think rather than implement more in this area in AWX itself, we'd suggest doing this mapping in an actual identity provider, and then you'd have the explicit groups in AWX that come from that identity provider.

kladiv commented 3 years ago

+1 @wenottingham @AlanCoding this feature (in UI) was supported in AWX 17.1.0. It seems disappeared in the newer releases of AWX Only possible via API/awxkit and Ansible awx collection (<=22.2.0).

In our organization schema it's really important Teams be members of other Teams.

kladiv commented 1 month ago

Hello, any news on this topic? Thank you