ansible / awx

AWX provides a web-based user interface, REST API, and task engine built on top of Ansible. It is one of the upstream projects for Red Hat Ansible Automation Platform.
Other
14.06k stars 3.42k forks source link

Assign an organization to instance groups to help manage permissions #14564

Open AlanCoding opened 1 year ago

AlanCoding commented 1 year ago

Please confirm the following

Feature type

New Feature

Feature Summary

Followup from https://github.com/ansible/awx/issues/4292 where roles were added to instance groups. Right now these roles only inherit permissions from system admin and system auditor.

Taken from comments in that issue - this issue proposes to add an organization field onto the InstanceGroup model so that the instance group roles can automatically inherit from organization roles, including admin_role, auditor_role, and optionally a new instance_group_admin role.

Select the relevant components

Steps to reproduce

N/A

Current results

Right now instance group permissions can only be delegated by adding roles directly to users or teams.

Sugested feature result

Assigning the organization field on instance groups will cause the instance group roles to inherit from org roles

Additional information

No response

youtous commented 1 year ago

+1, until implemented I've created a workaround script https://github.com/youtous/awx-ig-org-sync