Uploaded image for project: 'Ansible Automation Platform RFEs'
  1. Ansible Automation Platform RFEs
  2. AAPRFE-2744

Granular RBAC permission to separate "Job Launch" (Ad-Hoc) from "Schedule Creation"

XMLWordPrintable

    • False
    • Hide

      None

      Show
      None
    • False

      1. What is the nature and description of the request ?

      -> As an Ansible Automation Platform (AAP) administrator, the customer want the ability to grant users the permission to manually launch a Job Template (ad-hoc execution) without granting them the permission to create or manage schedules for that Job Template.
      We would like to see a distinct "Schedule" permission added to the Role-Based Access Control (RBAC) settings, separate from the standard "Execute" permission.
       

      2. Why does the customer need this? (List the business requirements here)

      -> We believe this is a significant improvement for AAP, as it provides greater granularity in managing permissions. In our case, we have users who need manual execution access to certain jobs in AAP. However, with the current permissions, it’s possible to accidentally schedule these same jobs for times when they shouldn’t run, which could lead to issues in our business. There’s no way to restrict job scheduling permissions to more privileged users or to assign only manual execution permissions to specific users.

              rh-ee-rreed Ron Reed
              rhn-support-lkaushal Lakshya Kaushal
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: