AWX provides a web-based user interface, REST API, and task engine built on top of Ansible. It is one of the upstream projects for Red Hat Ansible Automation Platform.
Other
14.06k
stars
3.42k
forks
source link
Assign an organization to instance groups to help manage permissions #14564
[X] I understand that AWX is open source software provided for free and that I might not receive a timely response.
Feature type
New Feature
Feature Summary
Followup from https://github.com/ansible/awx/issues/4292 where roles were added to instance groups. Right now these roles only inherit permissions from system admin and system auditor.
Taken from comments in that issue - this issue proposes to add an organization field onto the InstanceGroup model so that the instance group roles can automatically inherit from organization roles, including admin_role, auditor_role, and optionally a new instance_group_admin role.
Select the relevant components
[ ] UI
[X] API
[ ] Docs
[ ] Collection
[ ] CLI
[ ] Other
Steps to reproduce
N/A
Current results
Right now instance group permissions can only be delegated by adding roles directly to users or teams.
Sugested feature result
Assigning the organization field on instance groups will cause the instance group roles to inherit from org roles
admin_role will inherit from organization admin_role
read_role will inherit from organization auditor_role
Please confirm the following
Feature type
New Feature
Feature Summary
Followup from https://github.com/ansible/awx/issues/4292 where roles were added to instance groups. Right now these roles only inherit permissions from system admin and system auditor.
Taken from comments in that issue - this issue proposes to add an
organization
field onto theInstanceGroup
model so that the instance group roles can automatically inherit from organization roles, includingadmin_role
,auditor_role
, and optionally a newinstance_group_admin
role.Select the relevant components
Steps to reproduce
N/A
Current results
Right now instance group permissions can only be delegated by adding roles directly to users or teams.
Sugested feature result
Assigning the
organization
field on instance groups will cause the instance group roles to inherit from org rolesAdditional information
No response