Site icon UnixArena

Ansible Tower / AWX – Configuring Role Based Access (RBAC)

Ansible - RBAC

Ansible - RBAC

Ansible Tower/ AWX offers role-based access control for templates and workflows. It provides an option to define what kind of access needs to be given to a specific team or specific member within the organization. To automate each task, you need to create a template in Ansible Tower/ AWX. In some cases, we might create the templates for L1 tasks and in some cases, it could be L2 work which require more governance. Depends on the task’s criticality, you might need to involve a specific team or a specific member. In this article, we will walk through how to control Ansible Template permission and how to assign various types of access to other teams.

 

1. Login to Ansible Tower/ AWX.

 

2. Here are the team that configured on the system.

Ansible AWX – teams

 

3. Here is the list of members who are part of above-listed teams.

Ansible AWX Tower – Users

 

4. Navigate to the template tab and select the template for which you would like to delegate the access.

AWX – Ansible Tower – Template

 

5. Navigate to the permission tab and click on  ” + ”  .

Provide AWX template access to specific user

 

6. Select the configured users from the list and assign the role. Here Raffic can just execute the template.  This provides granular control over each template which you create within the organization.

Provide AWX template access to a specific user – Execute

 

7. The user will be listed in the template’s permission tab like below.

Template Access summary – Ansible AWX – Tower

 

8. Same way, you can select team as well to delegate the access. Here , we have given admin privileges to “Unix” team to manage the template.

Provide AWX template access to team – Admin

 

Similarly, You could control each template access using the ansible’s role-based access control. Hope this article is informative to you.

Share it! Comment it !! Be sociable !!!

Exit mobile version