freeipa / freeipa.ansible_freeipa / 1.11.1 / module / ipadelegation Manage FreeIPA delegations Authors: Thomas Woerner (@t-woerner) preview | supported by communityfreeipa.ansible_freeipa.ipadelegation (1.11.1) — module
Install with ansible-galaxy collection install freeipa.ansible_freeipa:==1.11.1
collections: - name: freeipa.ansible_freeipa version: 1.11.1
Manage FreeIPA delegations and delegation attributes
# Ensure delegation "basic manager attributes" is present - freeipa.ansible_freeipa.ipadelegation: ipaadmin_password: SomeADMINpassword name: "basic manager attributes" permission: read attribute: - businesscategory - employeetype group: managers membergroup: employees
# Ensure delegation "basic manager attributes" member attribute # departmentnumber is present - freeipa.ansible_freeipa.ipadelegation: ipaadmin_password: SomeADMINpassword name: "basic manager attributes" attribute: - departmentnumber action: member
# Ensure delegation "basic manager attributes" member attributes # employeetype and employeenumber are present - freeipa.ansible_freeipa.ipadelegation: ipaadmin_password: SomeADMINpassword name: "basic manager attributes" attribute: - employeenumber - employeetype action: member state: absent
# Ensure delegation "basic manager attributes" is absent - freeipa.ansible_freeipa.ipadelegation: ipaadmin_password: SomeADMINpassword name: "basic manager attributes" state: absent
name: aliases: - aciname description: The list of delegation name strings. elements: str required: true type: list group: description: User group ACI grants access to required: false type: str state: choices: - present - absent default: present description: The state to ensure. required: false type: str action: choices: - delegation - member default: delegation description: Work on delegation or member level. required: false type: str attribute: aliases: - attrs description: Attribute list to which the delegation applies elements: str required: false type: list permission: aliases: - permissions description: Permissions to grant (read, write). Default is write. elements: str required: false type: list membergroup: aliases: - memberof description: User group to apply delegation to required: false type: str ipaapi_context: choices: - server - client description: 'The context in which the module will execute. Executing in a server context is preferred. If not provided context will be determined by the execution environment. ' required: false type: str ipaadmin_password: description: The admin password. required: false type: str ipaapi_ldap_cache: default: true description: Use LDAP cache for IPA connection. type: bool ipaadmin_principal: default: admin description: The admin principal. type: str