Least permissions

Mon, 01 Jan 0001 00:00:00 +0000

Ansible Tower

For OneFuse Ansible Tower Modules.

Create or determine the Service Account for the OneFuse Ansible Tower Module.
Log in to Ansible Tower as an Administrator.
Go to Access > Users.

Add the Service Account via either Local Users or LDAP User Account (do not use Social, Azure AD, or Kerberos). If the desired Service Account already exists, edit the user.

Under the Details section for the user, verify the following:

Setting Selection

User Type Normal User
Select Save.

Setting	Selection
User Type	Normal User

Under the Permissions tab for the Service Account, perform the following:

Resource	Selection	Role
Organizations	Select all Organizations OneFuse will integrate with	Member
For granular permissions instead of at an Organizational level, set below:
Projects	Select all Projects OneFuse will integrate with	Use
Job Templates	Select all Job Templates OneFuse will integrate with	Execute
Inventories	Select all Inventories OneFuse will integrate with	Inventory Admin

Save the user.

Module endpoints on CloudBolt Documentation

Least permissions

Ansible Tower