Permissions to read all objects in organization (no admin) and launch jobs

Archives AWX Project
1

Hi

We are developing an application that connects to AWX to launch jobs using the API and a token. Before launching the job, the app checks for some data in Ansible: the host exists, the credentials exists, etc. We have tried with read, member and execute permissions for the user on the organization, but the user, using the API, can’t see any host or credential, only job templates. Giving the user admin permissions, can see all, but also managing them, but we don’t need the user to manage objects, only to see them to check their existence. What would be the correct permissions to achieve this?

Regards.

2

GIve them org admin permissions and generate the token with only “read” scope. Or give them system auditor permissions… a system auditor can see all things but can’t write.

3

With member, read, auditor and execute permissions on the organization, and the token having write access, the user still can’t launch jobs (“You don’t have permissions to perform this action”).

Any idea?

4

https://www.ansible.com/blog/security-and-delegation-with-ansible-tower-part-1