So friends, as I happened to mention, the graphical user interface of the Ans
ible Automation Controller
is very very popular, and let me get my little drone pen up here.
There we go, it's a little bit better. It's very very popular in the enterprise
environment.
That's because in the enterprise world, we have many different teams performing
many different
jobs. Maybe some particular teams are managing purely the networking devices,
the routers and
switches, other teams maybe organizing resources within the cloud. It may be
AWS, it may be Microsoft WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
AWS, it may be Microsoft
Azure, and perhaps other teams are managing on-prem servers. The point being is
that in these
complex environments, you're not just going to be a single user on your own
little machine,
automating out absolutely everything in a massive enterprise environment.
Ultimately, we want to have our environment organized any very particular way.
So certain users can access certain resources, they're going to be running
certain playbooks,
they will be targeting very particular managed devices, that type of thing. Now
,
this here, this concept of being organized is one of the advantages of this WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
this here, this concept of being organized is one of the advantages of this
particular platform
right here. In fact, one of the things that I want to talk to you about is the
creation of an
organization. Now really, an organization is just a collection of different
teams, projects,
inventories, that type of thing. So let's maybe say I happen to have an
organization called CBTN
for CBTNogus, okay? And in this environment, CBTN have different teams to
ultimately manage
different resources. So maybe we have our AWS cloud resource, and maybe we'll WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
different resources. So maybe we have our AWS cloud resource, and maybe we'll
get 10 engineers
managing that particular environment. We could ultimately have a team of
engineers,
which are ultimately comprised of different users, i.e. different individual
engineers
managing the system, but all operating under the same banner of CBTN. And then
of course,
we could have another team managing another resource, maybe just say some
regular servers
within our own environment on premises. That could be an entirely different
team,
again, under the same banner of CBTN as an organization, but again, comprised WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
again, under the same banner of CBTN as an organization, but again, comprised
of different users
managing different resources. Let me show you what I mean here. If I happen to
go to the documentation
here, if you happen to search for Ansible Automation Platform Organization, and
let's just collect
this top line right here for organizations. Now, what we actually see here is a
pretty helpful
graphic. And this is ultimately what I'm talking about here. We can see an
organization
as a logical collection of users, teams, projects, and inventories. And this is
the highest level in WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
the highest level in
the automation controller hierarchy. So we can see here we define an
organization such as,
let's maybe say CBTN, as I said before, and inside of here, we're going to have
inventories within
the organization, which is going to have different groups and hosts. This is
pretty much the same
concept we see in regular Ansible. The key point here is that we can have
multiple different
inventories with different groups and hosts. Again, within the same
organization, we can have
teams now what the teams actually comprise of, but the team itself can have its WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
teams now what the teams actually comprise of, but the team itself can have its
own permissions
and credentials. So we can have a group credential that allows the users or
rather the members of
that group to do particular tasks. But more specifically within that team, we
can also have users
with their own credentials, with varying permissions for more granularity. So
maybe
some senior users can have greater access and the more junior engineers can
have restricted access.
Then again, within the organization, we can have this concept of projects, and
our projects are
really going to be what are our playbooks. And as we'll see here, something WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
really going to be what are our playbooks. And as we'll see here, something
known as jobs and
templates, we'll talk about this very, very shortly. But ultimately, what I'm
trying to point out
here is that the organization is the highest level and it basically ties
everything together
within the enterprise. So briefly, let me just show you how we can create these
organizations,
as well as how we can create a team and comprise of different users, if we so
wish.
So let's go and do that then. So down the left hand side, on the dashboard, we
can see all of these
different options. Let me just scroll on down and we can see here under access,
we have our WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
we have our
organization. If I click this here, by default, we're going to have a default
organization. Now,
you can just use this if you so wish, but again, I'm trying to demonstrate
things. So let's go and
create our own brand new organization. So let me just add this one here. So let
's just call
that organization nugget tick. Okay. And we'll just the description as
organization for all
nugget tick resources. Now, we can see here we have other options such as the
maximum amount of
host within the organization or perhaps things such as the default execution
environments. But WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
environments. But
for now, all I'll do is I'll just choose save. Perfect. So here we have our
organization.
Network like on teams right here, notice we don't actually have any teams
within this organization.
That is what we want to create. So imagine you wanted to create a team, let's
just say ads,
and we'll just call this a cloud team. Okay. And we just say team to manage
cloud resources.
Now we specify what is the organization should this team be a member of? Well,
in this case here,
if I just collect the search, the only two that we have created so far is the WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
if I just collect the search, the only two that we have created so far is the
default,
which was automatically created and the new nugget tick organization. Let's
make the team
a member of nugget tick. So let's select this. And if I just save this right
here,
so again, going back to organization right here now, if I click on nugget tick,
now we can see
here in teams, we actually have cloud team a member or rather a part of the
organization.
And again, what are with thin teams where we have individual users? So if I
want to have a user
here, right now we have only a default user if I want to add one, let's maybe WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
here, right now we have only a default user if I want to add one, let's maybe
just say John McGovern,
and just give an email of John McGovern. That's cloud nuggets tick.com. Let's
have a username,
like I said, john Mcg and then we can add in a secure password. I'll just say
blah one,
which is a terrible password, obviously. But this is a demo. It's all confirmed
this.
And now we specify the user type. Now we have three different types of users
that we can add.
Let me tell you what each of them are. So a normal user is going to have both
read and write access, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
but the user here is going to be limited within the scope of their organization
,
so they can perhaps read and write information relating to inventories and
projects and jobs,
that type of thing, but again, only within the organization that they happen to
be a member of.
So that's the normal user. The next user, if we look at the drop down here,
this would be a system auditor accounts. So really, the system auditor account
is not going to be
limited to a single organization. We can have multiple different orgs within
here, but the system
auditor is only going to have read access, which kind of makes sense when you WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
auditor is only going to have read access, which kind of makes sense when you
actually think about
it. The auditor is really just auditing and reading the data that exists within
the controller
here. And then the last account we can see here is the system admin account.
This is going to have
a read and write access to pretty much everything, multiple organizations, all
the users, all the
teams, all the projects, that type of thing. So in this case here, if I just
want to have a user
within a particular organization, then what I can do is just specify a normal
user,
and then specify that the organization, the scope it should be within, is going WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
and then specify that the organization, the scope it should be within, is going
to be within
nugget tick. So if I click select here, and then save, here we have the actual
users here.
So if I go and click on users now, and I select John Mcgee, and I now go to
teams,
and I select associate, I can associate John Mcgee with the cloud team, and
then select
save. So now we can see here, John Mcgee is a member of the cloud team, which
is a member of
the nugget tech organization. And this is a team to manage cloud resources. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
the nugget tech organization. And this is a team to manage cloud resources.
This is what John has
been assigned to do. So what would happen in this case here would be when John
logs in,
let me just log out right here. If I log in with John Mcgee, and I think the
password was
blah one, which was a terrible password, but nevertheless, let's try and log in
. What we can
see here now is John Mcgee's actual dashboard. Now John Mcgee could actually
have particular
inventories, particular projects that John could work with that are designed to
manage
the cloud resources within, as we can see here, the organization nugget tick. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
the cloud resources within, as we can see here, the organization nugget tick.
So as you can imagine,
with respect to a very, very large environment, if you want to subdivide that
environment into
much more logical and much more manageable chunks, you can easily do so on the
Ansible
Automation Platform, Automation Controller, with organizations, with teams and
with users.