What is the nature and description of the request?
The customer is requesting the ability to filter inventory hosts so that only specific hosts are visible and accessible to users or teams based on their assigned roles. This would allow administrators to restrict access within a single inventory to only the subset of hosts relevant to a given user or team, without needing to create separate smart inventories.
Why does the customer need this? (List the business requirements here)
The customer wants to enforce stricter access control over hosts in Ansible Automation Platform.
They are onboarding a 3rd party vendor who should only be allowed to run jobs on a defined subset of servers that they maintain.
Current inventory capabilities do not provide a straightforward way to enforce host-level access restrictions within team roles.
They want to minimize administrative overhead by avoiding duplication of inventories while ensuring compliance and security.
How would you like to achieve this? (List the functional requirements here)
Introduce a host filter mechanism tied to user/team roles, so that when a team or user is assigned a role, they automatically inherit visibility and execution rights only to the filtered set of hosts.
This filter should work with both standard (basic) inventories and smart inventories.
Host access restrictions should be enforced across job templates, ad hoc commands, and other job types.
Administrators should be able to define host filters in the inventory or in team/user role assignments, without creating multiple redundant inventories.
Normal