# how to add group into AWX inventory while having users permission ?

**URL:** <https://forum.ansible.com/t/how-to-add-group-into-awx-inventory-while-having-users-permission/28220>\
**Category:** AWX Project\
**Tags:** awx\
**Created:** [July 31, 2018, 10:55pm UTC](https://forum.ansible.com/t/how-to-add-group-into-awx-inventory-while-having-users-permission/28220 "2018-07-31T22:55:15Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![mamadouadaba](https://avatars.discourse-cdn.com/v4/letter/m/b3f665/32.png) [@mamadouadaba](https://forum.ansible.com/u/mamadouadaba)\
**Post date:** [July 31, 2018, 10:55pm UTC](https://forum.ansible.com/t/how-to-add-group-into-awx-inventory-while-having-users-permission/28220/1 "2018-07-31T22:55:15Z")

</div>

Hello there,

Let me explain my context.

As admin of AWX platform, I would like to give permission of AWX users to manage the inventory without having the possibility to modify it but to manage group.

In order to achieve this, I give basic permissions to users ( user role ) to AWX platform, so they can connect into AWX and run their template but the problem is they couldn’t group their hosts in inventory since they haven’t admin role in the plateform.

My question is it a way to allow users to manage their group inventory while having limited permission to the plateform (user role).

Is possible to achieve it by modifying AWX code or developing or using an existing plugin ?

Thanks in advance

---

<div class="post-metadata">

**Author:** ![creisor](https://avatars.discourse-cdn.com/v4/letter/c/ecc23a/32.png) [@creisor](https://forum.ansible.com/u/creisor)\
**Post date:** [August 1, 2018, 11:40am UTC](https://forum.ansible.com/t/how-to-add-group-into-awx-inventory-while-having-users-permission/28220/2 "2018-08-01T11:40:25Z")

</div>

You could create an Organization in which they have admin privileges.

---

<div class="post-metadata">

**Author:** ![mamadouadaba](https://avatars.discourse-cdn.com/v4/letter/m/b3f665/32.png) [@mamadouadaba](https://forum.ansible.com/u/mamadouadaba)\
**Post date:** [August 1, 2018, 12:35pm UTC](https://forum.ansible.com/t/how-to-add-group-into-awx-inventory-while-having-users-permission/28220/3 "2018-08-01T12:35:30Z")

</div>

Hello creisor,

For security reasons, I don’t want to give them admin privileges on the inventory.

Regards,

---

<div class="post-metadata">

**Author:** ![Christopher\_Meyers](https://avatars.discourse-cdn.com/v4/letter/c/3e96dc/32.png) [@Christopher\_Meyers](https://forum.ansible.com/u/Christopher_Meyers)\
**Post date:** [August 1, 2018, 1:07pm UTC](https://forum.ansible.com/t/how-to-add-group-into-awx-inventory-while-having-users-permission/28220/4 "2018-08-01T13:07:19Z")

</div>

You mentioned wanting the user to be able to group inventory hosts. We expose ansible limit feature on job templates.

---

<div class="post-metadata">

**Author:** ![mamadouadaba](https://avatars.discourse-cdn.com/v4/letter/m/b3f665/32.png) [@mamadouadaba](https://forum.ansible.com/u/mamadouadaba)\
**Post date:** [August 2, 2018, 8:58am UTC](https://forum.ansible.com/t/how-to-add-group-into-awx-inventory-while-having-users-permission/28220/5 "2018-08-02T08:58:47Z")

</div>

Hello Christopher,  
Thanks for your response.

Alright you limited ansible feature on job templates.  
But it would be nice if users can group their inventory hosts since they would prefer sometimes to run job template in specific group of hosts.

Regards,

---

<div class="post-metadata">

**Author:** ![Michael\_T\_Wiley](https://avatars.discourse-cdn.com/v4/letter/m/4bbf92/32.png) [@Michael\_T\_Wiley](https://forum.ansible.com/u/Michael_T_Wiley)\
**Post date:** [August 2, 2018, 1:05pm UTC](https://forum.ansible.com/t/how-to-add-group-into-awx-inventory-while-having-users-permission/28220/6 "2018-08-02T13:05:58Z")

</div>

You should be able to work around it by having them pull their inventory from an SCM like github or similar. They would the be able to modify their repo that contains their inventory files and groups definitions and you can set the inventory to update from the repo on each job execution to make sure it’s always up to date. Would something like that maybe work for you?

---

<div class="post-metadata">

**Author:** ![mamadouadaba](https://avatars.discourse-cdn.com/v4/letter/m/b3f665/32.png) [@mamadouadaba](https://forum.ansible.com/u/mamadouadaba)\
**Post date:** [August 2, 2018, 4:14pm UTC](https://forum.ansible.com/t/how-to-add-group-into-awx-inventory-while-having-users-permission/28220/7 "2018-08-02T16:14:59Z")

</div>

hello Michael,

Very good Michael, it would be good in my case.

I’ll test it and update you once it works or not.

Thanks,  
Regards