Managing Staff SSH Access is a practical Ansible course for learners who can read a small inventory and playbook. Help a studio welcome new teammates, then remove an old device's access while protecting current logins, backup keys and existing notes.
Two Guided Labs introduce account creation, private work directories, reusable staff lists and selective public-key revocation. An independent Challenge combines those mechanisms with different staff assignments on two hosts. You test the result through real SSH identities and work files, rather than relying only on automation summaries.
What You Will Learn
After completing this course, you will be able to:
- create scoped Linux users and private work directories with Ansible;
- distinguish a client private key, an authorized public key and trusted server identity;
- use structured staff data, lookups and loops in a reusable declaration;
- revoke one specified old-device key without deleting an account or other legitimate grants;
- verify new-connection denial alongside successful current and backup logins;
- preserve original host-specific work and confirm unchanged declarations converge.
Who This Course Is For
This course is for beginning Ansible learners who want to manage a common staff-access task through actual remote behavior.
Prerequisites: Basic terminal navigation and prior practice reading a small Ansible inventory and playbook. The course explains the required account, primary-group, key, permission, lookup and loop concepts before using them.
Learning environment: Each unit provides its own Linux controller, two prepared SSH targets, disposable training keys, trusted client configuration and required collection. Targets are containers sharing the training VM's kernel. You use the Controller terminal; no personal server or real employee credentials are needed.
Frequently Asked Questions
Do I need to know SSH administration already?
No. The Guided Labs explain the identities and commands required for this scoped task. You should already be comfortable navigating a terminal and reading a small Ansible playbook.
Will I change the platform's login or SSH server?
No. You manage course-only staff accounts inside the prepared targets. The platform account, automation access and server settings stay unchanged.
Does removing an old key terminate an existing session?
No. The course verifies that new connections using the old key are denied. It does not teach terminating already authenticated sessions. The Challenge reuses the same account and key mechanisms with different per-host assignments.
