# AWX Service Account Permissions Other Namespaces

**URL:** <https://forum.ansible.com/t/awx-service-account-permissions-other-namespaces/34378>\
**Category:** AWX Project\
**Tags:** awx\
**Created:** [December 29, 2020, 7:14am UTC](https://forum.ansible.com/t/awx-service-account-permissions-other-namespaces/34378 "2020-12-29T07:14:11Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Adam\_Gardner](https://avatars.discourse-cdn.com/v4/letter/a/f08c70/32.png) [@Adam\_Gardner](https://forum.ansible.com/u/Adam_Gardner)\
**Post date:** [December 29, 2020, 7:14am UTC](https://forum.ansible.com/t/awx-service-account-permissions-other-namespaces/34378/1 "2020-12-29T07:14:11Z")

</div>

I’m trying to run the command module as follows:

command: kubectl scale deployment -n logdemo myDeployment --replicas=2

I’m getting this error: **User "system:serviceaccount:awx:awx" cannot get resource "deployments" in API group "apps" in the namespace "logdemo"**

How do I give the awx user additional permissions for the **logdemo** namespace?

---

<div class="post-metadata">

**Author:** ![Cnu\_k](https://avatars.discourse-cdn.com/v4/letter/c/a88e4f/32.png) [@Cnu\_k](https://forum.ansible.com/u/Cnu_k)\
**Post date:** [December 30, 2020, 8:51pm UTC](https://forum.ansible.com/t/awx-service-account-permissions-other-namespaces/34378/2 "2020-12-30T20:51:36Z")

</div>

I believe you need to create a Rolebinding for ‘awx’ serviceaccount in order for it to access logdemo namespace resources.  
See follow example below.  
[https://stackoverflow.com/questions/53960516/can-i-connect-one-service-account-to-multiple-namespaces-in-kubernetes](https://stackoverflow.com/questions/53960516/can-i-connect-one-service-account-to-multiple-namespaces-in-kubernetes)
