# AWX/Tower Job Approval

**URL:** <https://forum.ansible.com/t/awx-tower-job-approval/26150>\
**Category:** AWX Project\
**Tags:** awx\
**Created:** [November 28, 2017, 1:38pm UTC](https://forum.ansible.com/t/awx-tower-job-approval/26150 "2017-11-28T13:38:10Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![mkempster22uu](https://avatars.discourse-cdn.com/v4/letter/m/e0b2c6/32.png) [@mkempster22uu](https://forum.ansible.com/u/mkempster22uu)\
**Post date:** [November 28, 2017, 1:38pm UTC](https://forum.ansible.com/t/awx-tower-job-approval/26150/1 "2017-11-28T13:38:10Z")

</div>

I’ve been trying to look into some sort of job request and approval functionality from any software out there.

Similar to Cloudforms/ManageIQ where you can intergrate tower and have users request servers to be provisioned.

Does anyone here know of any software out there that allow users to request to run a job and have it approved. At the moment in AWX if a user or team has permissions to run a playbook (e.g. a security scan playbook) then that user can scan any server they have access to at anytime, With manageiq you can request to have a provision playbook executed and then an admin approves it.  
The only other option in AWX is to have the admins running playbooks like security scans as delegating full control of a job to be used whenever they like isn’t viable

---

<div class="post-metadata">

**Author:** ![ffirg](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/ffirg/32/10029_2.png) [@ffirg](https://forum.ansible.com/u/ffirg)\
**Post date:** [November 29, 2017, 5:56pm UTC](https://forum.ansible.com/t/awx-tower-job-approval/26150/2 "2017-11-29T17:56:18Z")

</div>

Hi Martyn

Cloudforms/ManageIQ would do it, if you’re looking for a technical focussed solution.  
If you want to wrap a more generic business type model around it then something like [https://www.jbpm.org/](https://www.jbpm.org/) or JBoss BPM Suite would be ideal.  
This will allow you to define business process modelling and flows and then call out to the likes of AWX/Tower via it’s API to do the heavy technical lifting.

Regards  
Phil.

---

<div class="post-metadata">

**Author:** ![mkempster22uu](https://avatars.discourse-cdn.com/v4/letter/m/e0b2c6/32.png) [@mkempster22uu](https://forum.ansible.com/u/mkempster22uu)\
**Post date:** [November 30, 2017, 9:13am UTC](https://forum.ansible.com/t/awx-tower-job-approval/26150/3 "2017-11-30T09:13:54Z")

</div>

Hi,

Thanks for that i’ll look into jbpm. ManageIQ works well for provisioning as requesting a ‘service’ as they call it, launches a the playbooks you have setup to provision a server, then it adds a service into the UI essentially representing that server showing what resources it has, who owns it and allowing you to request its deletion.

Running normal non provisioning playbooks like running a security scan playbook wouldn’t work as each time you request the run it would create a service just laying around that doesn’t make sense in the context of that playbook. this is understandable though as ManageIQ/Cloudforms is made for provisioning and it having that service representing the VM you created makes sense