Red Hat Ansible Automation Controller Application Server Security Technical Implementation Guide

The Red Hat Ansible Automation Controller Application Server Security Technical Implementation Guide (V2 R4) has 16 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

16STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R4

CurrentPublished Mon Jan 05 2026 What changed in V2R4

Automation Controller must be configured to authenticate users individually, prior to using a group authenticator.

Red Hat Ansible Automation Controller Application Server Security Technical Implementation Guide

Assessment Title

Rule Text

Automation Controller must be configured to authenticate users individually, prior to using a group authenticator.

Description

Discussion Text

Default superuser accounts, such as "root", are considered group authenticators. In the case of Automation Controller this is the "admin" account.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-256906

Rule

SV-256906r1015790_rule

Severity

medium

Rule Version

APAS-AT-000050

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Log in to the Automation Controller web console as an administrator and navigate to Access >> Users.

The only local user allowed is the default/breakglass "admin". All other users need to come from an external authentication source. If any other local users exist, this is a finding.

Implementation Procedure

Fix Text

Log in to the Automation Controller web console as an administrator and navigate to Access >> Users.

Click the Username to be removed.

Select "Delete" and confirm.

STIG check 11 of 16 in the Red Hat Ansible Automation Controller Application Server STIG checklist

← Previous · V-256905Automation Controller must be configured to use an enterprise user management system.Next · V-256907 →Automation Controller must utilize encryption when using LDAP for authentication.