DevOps Stack Exchange is a question and answer site for software engineers working on automated testing, continuous delivery, service integration and monitoring, and building SDLC infrastructure. It only takes a minute to sign up.
Sign up to join this community
for example, I have a tag named 'installagent' and i want to run this command ansible -playbook -i /path agent.yml --tags installagent from another server via ssh on my Ansible server with user 'testusr'. what should i do?
can i limit 'testusr' to only use specific tags?
( I read somewhere that i should give sudo permission to that user. if its true what should i do if i don't want to give sudo permission?)
There is no tool in Ansible to authorize a user to execute selected commands or tags only.
It seems a good idea to use sudo to authorize user to execute selective commands.
