# Ansible Tower: Trying to understand Permission structure

**URL:** <https://forum.ansible.com/t/ansible-tower-trying-to-understand-permission-structure/18742>\
**Category:** Ansible Project\
**Created:** [July 13, 2015, 1:20pm UTC](https://forum.ansible.com/t/ansible-tower-trying-to-understand-permission-structure/18742 "2015-07-13T13:20:01Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Markus\_Samlenski](https://avatars.discourse-cdn.com/v4/letter/m/eb9ed0/32.png) [@Markus\_Samlenski](https://forum.ansible.com/u/Markus_Samlenski)\
**Post date:** [July 13, 2015, 1:20pm UTC](https://forum.ansible.com/t/ansible-tower-trying-to-understand-permission-structure/18742/1 "2015-07-13T13:20:01Z")

</div>

Hi all,

I want to achieve a structure of permissions as following:

Organizations are parted as: Developers,DevOps,System-administrators  
The Developer orga for example has Teams, which are working on different projects.

so far so good, the problem i have now, is that i want a Team to be able to change a project (for example, update the SCM) - but i cannot grant that permission without making the user in question an administrator of the whole Developer Organization - as there is no Team-leader tier of permissions.

The team-members should be able to work on their project and Inventories without having to rely on a organization-admin.  
I obviously don’t want every team member of every team to be an organization-admin, only because i want them to be able to update the SCM.

Is there something i am missing? I can give explicit permission for job templates and for Inventories to users or teams, but i cant give it for projects.

greetings,  
Markus

---

<div class="post-metadata">

**Author:** ![Brian\_Coca](https://avatars.discourse-cdn.com/v4/letter/b/6de8d8/32.png) [@Brian\_Coca](https://forum.ansible.com/u/Brian_Coca)\
**Post date:** [July 13, 2015, 1:26pm UTC](https://forum.ansible.com/t/ansible-tower-trying-to-understand-permission-structure/18742/2 "2015-07-13T13:26:02Z")

</div>

Hi,

This mailing list is for ansible the open source project, for tower  
issues please forward questions to support@ansible.com or use the  
support.ansible.com to open a ticket.

---

<div class="post-metadata">

**Author:** ![Markus\_Samlenski](https://avatars.discourse-cdn.com/v4/letter/m/eb9ed0/32.png) [@Markus\_Samlenski](https://forum.ansible.com/u/Markus_Samlenski)\
**Post date:** [July 13, 2015, 1:46pm UTC](https://forum.ansible.com/t/ansible-tower-trying-to-understand-permission-structure/18742/3 "2015-07-13T13:46:18Z")

</div>

Thanks for the answer, i wrote them a mail.  
I didn’t want to miss use the mailinglist as free support,  
but i felt that my problem is broad enough for others to also  
benefit from possible answers