# Security acess to a machine via Ansible

**URL:** <https://forum.ansible.com/t/security-acess-to-a-machine-via-ansible/26821>\
**Category:** Ansible Project\
**Created:** [February 22, 2018, 12:12pm UTC](https://forum.ansible.com/t/security-acess-to-a-machine-via-ansible/26821 "2018-02-22T12:12:24Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Oscar\_Pinto](https://avatars.discourse-cdn.com/v4/letter/o/8dc957/32.png) [@Oscar\_Pinto](https://forum.ansible.com/u/Oscar_Pinto)\
**Post date:** [February 22, 2018, 12:12pm UTC](https://forum.ansible.com/t/security-acess-to-a-machine-via-ansible/26821/1 "2018-02-22T12:12:24Z")

</div>

```auto
How can I ensure that a user that is used to play the playbooks does not have ssh access in any other way

```

---

<div class="post-metadata">

**Author:** ![Kai\_Stian\_Olstad](https://avatars.discourse-cdn.com/v4/letter/k/e19adc/32.png) [@Kai\_Stian\_Olstad](https://forum.ansible.com/u/Kai_Stian_Olstad)\
**Post date:** [February 23, 2018, 2:30pm UTC](https://forum.ansible.com/t/security-acess-to-a-machine-via-ansible/26821/2 "2018-02-23T14:30:25Z")

</div>

I don't understand what you mean, since you have no answers other might have the same problem.  
Could you please rephrase.

---

<div class="post-metadata">

**Author:** ![Varun\_Chopra](https://avatars.discourse-cdn.com/v4/letter/v/54ee81/32.png) [@Varun\_Chopra](https://forum.ansible.com/u/Varun_Chopra)\
**Post date:** [February 24, 2018, 4:14pm UTC](https://forum.ansible.com/t/security-acess-to-a-machine-via-ansible/26821/3 "2018-02-24T16:14:32Z")

</div>

You can use Ansible Vault or go with Tower. It has support for teams.

---

<div class="post-metadata">

**Author:** ![Oscar\_Pinto](https://avatars.discourse-cdn.com/v4/letter/o/8dc957/32.png) [@Oscar\_Pinto](https://forum.ansible.com/u/Oscar_Pinto)\
**Post date:** [February 27, 2018, 9:45am UTC](https://forum.ansible.com/t/security-acess-to-a-machine-via-ansible/26821/4 "2018-02-27T09:45:59Z")

</div>

Hi There,

The question is i have a user that i intend do restrict ssh to the client machine, but i use it to the ansible playbooks.

Best Regards

sábado, 24 de Fevereiro de 2018 às 16:14:32 UTC, Varun Chopra escreveu:

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/ansible/original/1X/1882d9a01da5d8996a862359b0913cc568a39b84.svg) [@system](https://forum.ansible.com/u/system)\
**Post date:** [February 27, 2018, 2:41pm UTC](https://forum.ansible.com/t/security-acess-to-a-machine-via-ansible/26821/5 "2018-02-27T14:41:51Z")

</div>

The easiest way is to only allow that user logging in with a specific  
ssh key, then secure the private key and dole out access indirectly as  
needed.

You could do this via sudo/acls/etc or you can use something like  
AWX/Tower, which is designed for it.