diff --git a/.ansible-lint b/.ansible-lint
index e4cde01..b439eee 100644
--- a/.ansible-lint
+++ b/.ansible-lint
@@ -1,4 +1,5 @@
 skip_list:
   - run-once
+  - var-naming[no-role-prefix] # user-facing API dicts (cis, system, hypervisor) are intentionally not role-prefixed
 exclude_paths:
   - roles/global_defaults/