Security Automation with Ansible 2
上QQ阅读APP看书,第一时间看更新

RBAC for Ansible Tower

Ansible Tower supports RBAC to manage multiple users with different permissions and roles. It also supports Lightweight Directory Access Protocol (LDAP) integration in the enterprise version to support Active Directory. This feature allows us to create different levels of users for accessing Ansible Tower. For example:

  • The operations team requires a system administrator role to perform playbook execution and other activities like monitoring
  • The security team requires a system auditor role to perform audit check for compliance standards such as Payment Card Industry Data Security Standard (PCI DSS) or even internal policy validation
  • Normal users, such as team members, might just want to see how things are going, in the form of status updates and failure (or) success of job status

Users can be assigned to different types of roles