Should an appliation in a non-Default organization be able to see all job templates?

[kastl-ars]

Hi all,

not sure if I am missing something here, but I have created an application in our AWX instance. Contrary to the documentation I have created it in an organization other than the default one.

It could successfully connect, but I can see all job templates in our AWX instance, not just the ones in the organization the application is in.

Is this due to the token being issued by an administrator?

Should I create a user in the organization and create the token as that user?

Kind Regards,
Johannes

[amitchettri]

It looks like, based on the user and the token, if the user whose token you are using when logged in to AWX has access to all the orgs, all projects, and job templates.

That can be the reason for all JT pulls since job sync is with https://endpoint/api/v2 endpoint

[kastl-ars]

Thanks, that would have been my guess.

So the solution would be to create a squest user in that organization and use that user's token?

[amitchettri]

I have not tried the same but it mainly depend on that only, what user see UI only that gets pull to the squest

[kastl-ars]

OK, changing to a different user's token I can no longer see any job templates, as the user does not have permissions on that.

So, this is really caused by the user's permissions, not by the organization the application resides in.