Chapter 5. Managing access with role based access control

Procedure

1. From the navigation panel, select menu:Access Management Organizations.
2. In the Search bar, enter an appropriate keyword for the organization you want to search for and click the arrow icon.
3. From the menu bar, you can sort the list of organizations by using the arrows for Name to toggle your sorting preference.
4. You can also sort the list by selecting Name, Created or Last modified from the Sort list.
5. You can view organization details by clicking an organization Name on the Organizations page.

Procedure

1. From the navigation panel, select Access Management Organizations.
2. Click Create organization.

3. Enter the Name and optionally provide a Description for your organization.

   Note

   If automation controller is enabled on the platform, continue with Step 4. Otherwise, proceed to Step 6.

4. Select the name of the Execution environment or search for one that exists that members of this team can run automation.
5. Enter the name of the Instance Groups on which to run this organization.
6. Optional: Enter the Galaxy credentials or search from a list of existing ones.

7. Select the Max hosts for this organization. The default is 0. When this value is 0, it signifies no limit. If you try to add a host to an organization that has reached or exceeded its cap on hosts, an error message displays:

   You have already reached the maximum number of 1 hosts allowed for your organization. Contact your System Administrator for assistance.

8. Click Next.

9. If you selected more than 1 instance group, you can manage the order by dragging and dropping the instance group up or down in the list and clicking Confirm.

   Note

   The execution precedence is determined by the order in which the instance groups are listed.

10. Click Next and verify the organization settings.
11. Click Finish.

Procedure

1. From the navigation panel, select Access Management Organizations.
2. From the Organizations list view, select the organization to which you want to manage notifications.
3. Select the Notification tab.
4. Use the toggles to enable or disable the notifications to use with your particular organization. For more information, see Enable and disable notifications.
5. If no notifiers have been set up, select Automation Execution Administration Notifiers from the navigation panel.

Procedure

1. From the navigation panel, select Access Management Organizations.
2. From the Organizations list view, select the organization whose execution environments you want to manage.
3. Select the Execution Environments tab.
4. If no execution environments are available, click Create execution environment to create one. Alternatively, you can create an execution environment from the navigation panel by selecting Automation Execution Infrastructure Execution Environments.

5. Click Create execution environment.

   Note

   After creating a new execution environments, return to Access Management Organizations and select the organization in which you created the execution environment to update the list on that tab.

6. Select the execution environments to use with your particular organization.

Procedure

1. From the navigation panel, select Access Management Teams.
2. In the Search bar, enter an appropriate keyword for the team you want to search for and click the arrow icon.
3. From the menu bar, you can sort the list of teams by using the arrows for Name and Organization to toggle your sorting preference.
4. You can view team details by clicking a team Name on the Teams page.
5. You can view organization details by clicking the link in the Organization column.

Procedure

1. From the navigation panel, select Access Management Teams.
2. Click Create team.
3. Enter a Name and optionally give a Description for the team.

4. Select an Organization to be associated with this team.

   Note

   Each team can only be assigned to one organization.

5. Click Create team.

   The Details page opens, where you can review and edit your team information.

Procedure

1. From the navigation panel, select Access Management Teams.
2. Select the team to which you want to add users.
3. Select the Users tab and click Add users.
4. Select one or more users from the list by clicking the checkbox next to the name to add them as members of this team.
5. Click Add users.

Procedure

1. From the navigation panel, select Access Management Teams.
2. Select the team from which you want to remove users.
3. Select the Users tab.
4. Click the Remove user icon next to the user you want to remove as a member of the team.

5. You can delete multiple users by selecting the checkbox next to each user you want to remove, and selecting Remove selected users from the More actions ⋮ list.

   Note

   If the user is a Team administrator, you can remove their membership to the team from the Administrators tab.

   This launches a confirmation dialog, asking you to confirm the removal.

Procedure

1. From the navigation panel, select Access Management Teams.
2. Select the team to which you want to add an administrator.
3. Select the Administrators tab and click Add administrator(s).
4. Select one or more users from the list by clicking the checkbox next to the name to add them as administrators of this team.
5. Click Add administrators.

Procedure

1. From the navigation panel, select Access Management Teams.
2. Select the team Name to which you want to add roles.

3. Select the Roles tab and click Add roles.

   Note

   If you have multiple Ansible Automation Platform components installed, you will see selections for the roles associated with each component in the Roles menu bar. For example, Automation Execution for automation controller roles, Automation Decisions for Event-Driven Ansible roles.

4. Select a Resource type and click Next.
5. Select the resources to receive the new roles and click Next.
6. Select the roles to apply to the resources and click Next.

7. Review the settings and click Finish.

   The Add roles dialog displays indicating whether the role assignments were successfully applied, click Close to close the dialog.

Procedure

1. From the navigation panel, select Access Management Teams.
2. Select the team Name from which you want to remove roles.

3. Select the Roles tab.

   Note

   If you have multiple Ansible Automation Platform components installed, you will see selections for the roles associated with each component in the Roles menu bar. For example, Automation Execution for automation controller roles, Automation Decisions for Event-Driven Ansible roles.

4. Select the checkbox next to each resource you want to remove and click Remove selected roles from the ⋮ list on the menu bar.
5. Select the checkbox to confirm removal of the selected roles and click Remove role.

Procedure

1. From the navigation panel, select Access Management Teams.
2. Select the check box for the team that you want to remove.

3. Select the ⋮ icon and select Delete team.

   Note

   You can delete multiple teams by selecting the checkbox next to each team you want to remove, and selecting Delete teams from the More actions ⋮ list.

Procedure

1. From the navigation panel, select Access Management Users.
2. In the Search bar, enter an appropriate keyword for the user you want to search for and click the arrow icon.
3. From the menu bar, you can sort the list of users by using the arrows for Username, Email, First name, Last name or Last login to toggle your sorting preference.
4. You can view user details by selecting a Username from the Users list view.

Procedure

1. From the navigation panel, select Access Management Users.
2. Click Create user.
3. Enter the details about your new user in the fields on the Create user page. Fields marked with an asterisk (*) are required.

4. Normal users are the default when no User type is specified. To define a user as an administrator or auditor, select a User type checkbox.

   Note

   If you are modifying your own password, log out and log back in again for it to take effect.

5. Select the Organization to be assigned for this user. For information about creating a new organization, refer to Creating an organization.
6. Click Create user.

Procedure

1. From the navigation panel, select Access Management Users.
2. Select the check box for the user that you want to modify.
3. Click the Pencil icon and select Edit user.
4. The Edit user page is displayed where you can modify user details such as, Password, Email, User type, and Organization.
5. After your changes are complete, click Save user.

Procedure

1. From the navigation panel, select Access Management Users.
2. Select the checkbox for the user that you want to remove.

3. Click the ⋮ icon next to the user you want removed and select Delete user.

   Note

   You can delete multiple users by selecting the checkbox next to each user you want to remove, and clicking Delete users from the More actions ⋮ list.

Procedure

1. From the navigation panel, select Access Management Users.
2. From the Users list view, click on the user to which you want to add roles.
3. Select the Roles tab to display the set of roles assigned to this user. These provide the ability to read, modify, and administer resources.

4. To add new roles, click Add roles.

   Note

   If you have multiple Ansible Automation Platform components installed, you will see selections for the roles associated with each component in the Roles menu bar. For example, Automation Execution for automation controller roles, Automation Decisions for Event-Driven Ansible roles.

5. Select a Resource type and click Next.
6. Select the resources that will receive new roles and click Next.
7. Select the roles that will be applied to the resources and click Next.

8. Review the settings and click Finish.

   The Add roles dialog displays indicating whether the role assignments were successfully applied. Click Close to close the dialog.

Procedure

1. From the navigation panel, select Access Management Users.
2. Select the user Name from which you want to remove roles.

3. Select the Roles tab.

   Note

   If you have multiple Ansible Automation Platform components installed, you will see selections for the roles associated with each component in the Roles menu bar. For example, Automation Execution for automation controller roles, Automation Decisions for Event-Driven Ansible roles.

4. Select the checkbox next to each resource you want to remove and click Remove selected roles from the More actions ⋮ list on the menu bar.
5. Select the checkbox to confirm removal of the selected roles and click Remove role.

Procedure

1. From the navigation panel, select a resource to which you want to provide team access. For example, Automation Execution Templates.
2. Select the Team Access tab.
3. Click Add roles.
4. Click the checkbox beside the team to assign that team to your chosen type of resource and click Next.
5. Select the roles you want applied to the team for the chosen resource and click Next.
6. Review the settings and click Finish. The Add roles dialog displays indicating whether the role assignments were successfully applied.
7. You can remove resource access for a team by selecting the Remove role icon next to the team. This launches a confirmation dialog, asking you to confirm the removal.

Procedure

1. From the navigation panel, select a resource to which you want to provide team access. For example, Automation Execution Templates.
2. Select the User access tab.
3. Click Add roles.
4. Click the checkbox beside the user to assign that user to your chosen type of resource and click Next.
5. Select the roles you want applied to the user for the chosen resource and click Next.
6. Review the settings and click Finish. The Add roles dialog displays indicating whether the role assignments were successfully applied.
7. You can remove resource access for a user by selecting the Remove role icon next to the user. This launches a confirmation dialog, asking you to confirm the removal.