# Q on organizations best practice - one or more for what reasons **URL:** \ **Category:** AWX Project\ **Created:** [January 10, 2018, 10:42pm UTC](https://forum.ansible.com/t/q-on-organizations-best-practice-one-or-more-for-what-reasons/26457 "2018-01-10T22:42:43Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![countryroad62](https://avatars.discourse-cdn.com/v4/letter/c/e8c25b/32.png) [@countryroad62](https://forum.ansible.com/u/countryroad62)\ **Post date:** [January 10, 2018, 10:42pm UTC](https://forum.ansible.com/t/q-on-organizations-best-practice-one-or-more-for-what-reasons/26457/1 "2018-01-10T22:42:43Z")
I’m not sure if this is the right venue (point me elsewhere if necessary) but… I’ve not found anything that talks about organizations other than how to add and admin them. If a small “company” is one - why would you want more than one organization? I can see doing that if you are multi-hosting larger companies with multiple “divisions”. Are there examples out there where one or many make sense (and could that be added to the beginning of the tower docs on organizations)? thx jim ---
**Author:** ![Chris\_Church](https://avatars.discourse-cdn.com/v4/letter/c/f475e1/32.png) [@Chris\_Church](https://forum.ansible.com/u/Chris_Church)\ **Post date:** [January 11, 2018, 3:37am UTC](https://forum.ansible.com/t/q-on-organizations-best-practice-one-or-more-for-what-reasons/26457/2 "2018-01-11T03:37:39Z")
The main purpose of organizations is multi-tenancy. Each organization restricts access to projects/inventories/jobs to only a subset of users, allowing one AWX/Tower server/cluster to serve different subsets of users as though they had their own separate server. While all organizations are sharing some resources with each other (the database), instance groups and isolated nodes allow each organization to have a certain reserved capacity for running jobs. For a small company, one organization may be all you need. For a large company, each organization may represent a division/department or a product/project/site within the company. The way you map organizations to your own company structure is up to you. In Tower, the self-support edition is limited to only one organization, while the standard/premium editions can have multiple ([https://www.ansible.com/products/tower/editions](https://www.ansible.com/products/tower/editions)). ---
**Author:** ![Kjell\_Tillstrand](https://avatars.discourse-cdn.com/v4/letter/k/ea5d25/32.png) [@Kjell\_Tillstrand](https://forum.ansible.com/u/Kjell_Tillstrand)\ **Post date:** [January 17, 2018, 2:08pm UTC](https://forum.ansible.com/t/q-on-organizations-best-practice-one-or-more-for-what-reasons/26457/3 "2018-01-17T14:08:13Z")
Is there a way for a team member to create an template and give permission to run this template to another team that is not in the same organization? I have a customer with development and operations in different companies and would like to get the development team to what to be done on production servers via a Ansible tower template. The only working solution I’ve found is to get an admin to give operations team privileges or to put a operations team in the same organization. The best solution I can think of would be that the dev team could delegate to another org to run template with the inventory decided at runtime. Regards Kjell ---
**Author:** ![jmitchel](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/jmitchel/32/10148_2.png) [@jmitchel](https://forum.ansible.com/u/jmitchel)\ **Post date:** [January 17, 2018, 2:58pm UTC](https://forum.ansible.com/t/q-on-organizations-best-practice-one-or-more-for-what-reasons/26457/4 "2018-01-17T14:58:16Z")
So far as I understand, [organizations](https://docs.ansible.com/ansible-tower/latest/html/userguide/organizations.html) are the top-level of hierarchy, and you can’t delegate things between different orgs (at least that’s not what they are made to do). > I have a customer with development and operations in different companies and would like to get the development team to what to be done on production servers via a Ansible tower template. I think the correct way to do this would be to create Development and Ops Teams within the same Organization, and then you should be able to trivially share content between the two using the permissions tab available on the detail view of any resource. ---
**Author:** ![jmitchel](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/jmitchel/32/10148_2.png) [@jmitchel](https://forum.ansible.com/u/jmitchel)\ **Post date:** [January 17, 2018, 3:02pm UTC](https://forum.ansible.com/t/q-on-organizations-best-practice-one-or-more-for-what-reasons/26457/5 "2018-01-17T15:02:53Z")
Actually I am wrong, hah. Investigating this flow now, I’ll report back after I figure this out! ---
**Author:** ![jmitchel](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/jmitchel/32/10148_2.png) [@jmitchel](https://forum.ansible.com/u/jmitchel)\ **Post date:** [January 17, 2018, 3:24pm UTC](https://forum.ansible.com/t/q-on-organizations-best-practice-one-or-more-for-what-reasons/26457/6 "2018-01-17T15:24:38Z")
This is actually pretty simple. Any user that is admin of both the org the prod team is in and the org the dev team is in can go to the permissions tab of the JT you want to share and delegate it between the teams. All you have to do is select the team and give them the “execute” role. Note the delegator can be e a system admin account, or just a regular user who has been assigned to org admin of both orgs. Hope that helps and sorry for the initial confusion on my part, John