Chapter 6. Roles
Chapter 6. Roles Roles are units of organization in the Red Hat Ansible Automation Platform. When you assign a role to a team or user, you are granting access to use, read, or write credentials. Because of the file structure associated with a role, roles become redistributable units that enable you to share behavior among resources, or with other users. All access that is granted to use, read, or write credentials is handled through roles, and roles are defined for a resource. 6.1. Displaying roles You can display the roles assigned for component resources from the Access Management menu. Procedure From the navigation panel, select Access Management Roles . Select a tab for the component resource for which you want to create custom roles. Note If you have multiple Ansible Automation Platform components installed, you will see selections for the roles associated with each component in the Roles menu bar. For example, Automation Execution for automation controller roles, Automation Decisions for Event-Driven Ansible roles. From the table header, you can sort the list of roles by using the arrows for Name , Description , Created and Editable or by making sort selections in the Sort list. You can filter the list of roles by selecting Name or Editable from the filter list and clicking the arrow. 6.2. Creating a role Ansible Automation Platform services provide a set of predefined roles with permissions sufficient for standard automation tasks. It is also possible to configure custom roles, and assign one or more permission filters to them. Permission filters define the actions allowed for a specific resource type. Procedure From the navigation panel, select Access Management Roles . Select a tab for the component resource for which you want to create custom roles. Note If you have multiple Ansible Automation Platform components installed, you will see selections for the roles associated with each component in the Roles menu bar. For example, Automation Execution for automation controller roles, Automation Decisions for Event-Driven Ansible roles. Click Create role . Provide a Name and optionally include a Description for the role. Select a Content Type . Select the Permissions you want assigned to this role. Click Create role to create your new role. 6.3. Editing a role Built in roles can not be changed, however, you can modify custom roles from the Roles list view. The Editable column in the Roles list view indicates whether a role is Built-in or Editable . Procedure From the navigation panel, select Access Management Roles . Select a tab for the component resource for which you want to modify a custom role. Note If you have multiple Ansible Automation Platform components installed, you will see selections for the roles associated with each component in the Roles menu bar. For example, Automation Execution for automation controller roles, Automation Decisions for Event-Driven Ansible roles. Click the Edit role icon to the role you want and modify the role settings as needed. Click Save role to save your changes. 6.4. Deleting a role Built in roles can not be deleted, however, you can delete custom roles from the Roles list view. Procedure From the navigation panel, select Access Management Roles . Select a tab for the component resource for which you want to create custom roles. Note If you have multiple Ansible Automation Platform components installed, you will see selections for the roles associated with each component in the Roles menu bar. For example, Automation Execution for automation controller roles, Automation Decisions for Event-Driven Ansible roles. Click the More Actions icon ... to the role you want and select Delete role . To delete roles in bulk, select the roles you want to delete from the Roles list view, click the More Actions icon ... , and select Delete roles .