query_filters: how to filter on a contact (name) of a tenant

[FOTempel]

Suppose:

• A virtual_machine is assigned to a tenant
• Each tenant has a contact
• Tenant names are dynamically generated and an existing contact assigned to it (unless a VM is assigned to an existing one, that already has a contact)

This way each VM is assigned an owner just by adding it to a tenant (or upon creating one). The long and short of it is that the tenant names are variable and not really an item to query on. But now I want to filter the inventory so the owner can only target his own machines in Ansible. Yes, I can do it with tags, but that just adds more items to manage. I would really like to come up with a query filter that allows me to select objects in Netbox based on contact name. Is there such a way?

[FOTempel]

Someone will be looking for this, so here's an answer. The secret lies in the permissions in Netbox, not in the query filters in the dynamic inventory: Add a permission for the user to view virtual machines and add a constraint to it like so:

{
  "tenant__contacts__contact__name":"<some_contact_name>"
}

For more information Netbox constrains, see:
https://netboxlabs.com/docs/netbox/administration/permissions/#constraints
and: https://www.packetcoders.io/mastering-nextbox-user-access-with-permission-constraints/