Manage access to organizations

You can manage access to an organization by selecting an organization from the Organizations list view and selecting the associated tabs for providing access to users, administrators, or teams.

Assign a user to an organization

You can give a user with access to an organization, and therefore the resources within the organization, by assigning them to the organization and managing the organization roles associated with the user.

About this task

You can view a list of users associated with an organization, along with the roles each user is directly assigned, in the organization’s Users tab. When you manage a user’s organization roles in the Users tab, you can also see how the user was assigned their roles, whether indirectly, through association with a team, or through direct user assignment by an administrator.

Note:

If a user is assigned a "team member" role, this likely indicates that they have an indirectly-assigned role. To see a user’s indirectly-assigned roles, click the pencil icon to view and manage roles, and then click the link labeled View indirectly-assigned organization roles in the page banner.

To assign a user to an organization, the user must already exist. For more information, see Creating a user. To assign roles to a user, the role must already exist. See Creating a role for more information.

Procedure

From the navigation panel, select Access Management > Organizations.
From the Organizations list view, select the organization to which you want to add a user.
Click the Users tab, then click Assign Users to add users.
Select one or more users from the list by clicking the checkbox next to the name to add them as members.
Click Next.
Select the roles you want the selected user to have. Scroll down for a complete list of roles.

Note:

Ensure that you are selecting the desired role within the correct component context, because resources like projects and credentials can be associated with both Automation Execution (automation controller) and Automation Decisions (Event-Driven Ansible).
Click Next to review the roles settings.
Click Finish to apply the roles to the selected users, and to add them as members. The Add roles dialog displays the updated roles assigned for each user.

Note:

A user with roles associated with an organization loses those roles if they are removed from the organization.
To remove a particular user from the organization, select Remove user from the More Actions⋮ list next to the user. This launches a confirmation dialog, asking you to confirm the removal. Note that removing a user from an organization will also remove all organization roles that the user is indirectly assigned from that specific organization.
To manage roles for users in an organization, click the ⚙ icon next to the user and select Manage roles. You can manage organization roles that are directly assigned to a user by selecting or clearing the checkboxes. Double-check the component column to ensure you are selecting the desired role in the correct component context.

Tip:

From this screen, you can view, but not manage, indirectly-assigned roles that a user has inherited from a team assignment. To view indirectly-assigned roles, along with the team assignment they originated from, click View indirectly-assigned organization roles link in the banner beneath the page heading. To manage roles indirectly assigned to a user through a team assignment, manage that team’s role assignments or remove the user from that team.

Assign an administrator to an organization

Assign existing users as administrators to an organization so they can manage its membership and settings. This allows designated administrators to create new users and teams and grant permissions.

Procedure

From the navigation panel, select Access Management > Organizations.
From the Organizations list view, select the organization to which you want to add a user, administrator, or team.
Click the Administrators tab.
Click Add administrators.
Select the users from the list by clicking the checkbox next to the name to assign the administrator role to them for this organization.
Click Add administrators.
To remove a particular administrator from the organization, select Remove administrator from the More actions ⋮ list next to the administrator name. This launches a confirmation dialog asking you to confirm the removal.

Note:

If the user has been added as a member to this organization, they will continue to be a member of this organization. However, if they were added to the organization when the administrator assignment was made, they are removed from the organization.

Assigning a team to an organization

Give a team access to an organization by assigning roles to the team in the organization's Teams tab. Team role assignments do not automatically grant organization membership to team members.

About this task

To assign roles to a team, the team must already exist in the organization. For more information, see Creating a team. To assign roles for a team, the role must already exist. See Creating a role for more information.

Users who are members of a team can exercise the team's assigned roles on organization resources. However, some operations, such as creating resources within the organization, require explicit organization membership in addition to team role assignments.

Important:

To ensure that team members can perform all operations granted by their team roles, verify that each user is also a member of the organization. For more information, see Assign a user to an organization.

Procedure

From the navigation panel, select Access Management > Organizations.
From the Organizations list view, select the organization to which you want to assign team access.
Click the Teams tab. If no teams exist, click Create team to create a team and assign it to this organization.
Click Assign roles.
Select the roles you want the selected team to have. Scroll down for a complete list of roles.

Note:

Ensure that you are selecting the desired role within the correct component context, because resources like projects and credentials can be associated with both Automation Execution (automation controller) and Automation Decisions (Event-Driven Ansible).
Click Next to review the roles settings.
Click Finish to apply the roles to the selected teams. The Assign roles dialog displays the updated roles assigned for each team.
Click Close.

Note:

A team with associated roles retains them if they are reassigned to another organization.
To manage roles for teams in an organization, click the ⚙ icon next to the user and select Manage roles.

Delete an organization

Delete an organization to permanently remove it along with its teams and associated resources. Users are not deleted, but they lose all role assignments associated with that organization.

About this task

You must be an Organization administrator or System administrator to delete an organization. When you delete an organization, all teams belonging to that organization are also deleted. Users are not deleted, but their role assignments from the organization and its teams are revoked.

Note:

When you try to delete items that are used by other resources, a message is displayed warning you that the deletion might impact other resources and prompts you to confirm the deletion. Some screens contain items that are invalid or have been deleted previously, and will fail to run.

Procedure

From the navigation panel, select Access Management > Organizations.
Click the ⋮ icon next to the organization you want removed and select Delete organization.
Select the confirmation checkbox and click Delete organizations to proceed with the deletion. Otherwise, click Cancel.

Note:

You can delete multiple organizations by selecting the checkbox next to each organization you want to remove, and selecting Delete selected organizations from the More actions ⋮ list on the menu bar.