non-admin team members can create job templates, but not execute them

Archives AWX Project
1

I must be doing something wrongly, or maybe this is a feature?

I have created a team, assigned members to it and granted a bunch or permissions.
Users that are members of the team can create new job templates,
But, they can’t edit the permissions “tab” until they save their newly created job template,
But then as the team has no permissions for this template they can’t edit it, nor assign permissions…

So, only a user with admin access can grant execute permission on the new template to the user that just created it.

If this is a feature (and I can see why one might desire this behavior)…
How do I tune up the notification part so that the admins get notified of a new job template pending their granting of permissions to be executed?

2

We’ve been expanding and making rbac rules more granular, however this seems like it violates the principal of “least surprise”. Can you file an issue for this and we’ll take a look?

3

Thanks! I’ll give creating an issue a shot