Thanks a lot for your answer @Denney-tech
I will have a look onto awx > 24.3.0
Regarding “sources of truth” in one inventory, this most probably will not work for what we are doing:
We have automated the creation of firewall rules via REST API via Ansible role/playbook.
The rules for one application are described in the group vars of one inventory.
The granularity then is one inventory per application team to maintain the rules for that application.
In each of those inventories there in fact even only is one host, the endpoint host for the REST API.
There might be application teams who are doing more automation via Ansible and provide their own playbooks and more hosts in their inventories, but many of those applications already have some installation automation and they only need the firewall rule automation in addition.
Does this make sense ?