It was observed earlier (see https://issues.redhat.com/browse/RHEL-2829) that the RHEL system roles can be installed both as RHEL RPM or from Red Hat Automation Hub (RH AH) and a playbook will work in both cases using FQCNs such as redhat.rhel_system_roles.timesync.

However, the ansible-freeipa does not currently allow for this, but it would seem with some newly added sym links this might be doable, unless some show-stoppers are found during testing.

From packaging perspective, the 'redhat' directory ownership should not be an issue:

$ rpm -qf /usr/share/ansible/collections/ansible_collections/redhat
rhel-system-roles-1.88.9-0.1.el9_5.noarch
ansible-pcp-2.3.0-1.el9.noarch

To allow proper testing the first step could be:

# mkdir -p /usr/share/ansible/collections/ansible_collections/redhat
# cd /usr/share/ansible/collections/ansible_collections/redhat
# ln -s ../freeipa/ansible_freeipa rhel_idm

Then, a playbook using e.g. redhat.rhel_idm.ipabackup should work the same regardless from where the collection was installed. Thhanks.