freeipa.ansible_freeipa.ipaprivilege (1.11.1) — module

Install collection

Install with ansible-galaxy collection install freeipa.ansible_freeipa:==1.11.1

Add to requirements.yml

  collections:
    - name: freeipa.ansible_freeipa
      version: 1.11.1

Description

Manage FreeIPA privilege and privilege members

Usage examples

Scanned by Steampunk Spotter

• Success
  Steampunk Spotter scan finished with no errors, warnings or hints.

# Ensure privilege "Broad Privilege" is present
- freeipa.ansible_freeipa.ipaprivilege:
    ipaadmin_password: SomeADMINpassword
    name: Broad Privilege
    description: Broad Privilege

Scanned by Steampunk Spotter

• Success
  Steampunk Spotter scan finished with no errors, warnings or hints.

# Ensure privilege "Broad Privilege" has permissions set
- freeipa.ansible_freeipa.ipaprivilege:
    ipaadmin_password: SomeADMINpassword
    name: Broad Privilege
    permission:
    - "Write IPA Configuration"
    - "System: Write DNS Configuration"
    - "System: Update DNS Entries"
    action: member

Scanned by Steampunk Spotter

• Success
  Steampunk Spotter scan finished with no errors, warnings or hints.

# Ensure privilege member permission 'Write IPA Configuration' is absent
- freeipa.ansible_freeipa.ipaprivilege:
    ipaadmin_password: SomeADMINpassword
    name: Broad Privilege
    permission:
    - "Write IPA Configuration"
    action: member
    state: absent

Scanned by Steampunk Spotter

• Success
  Steampunk Spotter scan finished with no errors, warnings or hints.

# Rename privilege "Broad Privilege" to "DNS Special Privilege"
- freeipa.ansible_freeipa.ipaprivilege:
    ipaadmin_password: SomeADMINpassword
    name: Broad Privilege
    rename: DNS Special Privilege
    state: renamed

Scanned by Steampunk Spotter

• Success
  Steampunk Spotter scan finished with no errors, warnings or hints.

# Ensure privilege "DNS Special Privilege" is absent
- freeipa.ansible_freeipa.ipaprivilege:
    ipaadmin_password: SomeADMINpassword
    name: DNS Special Privilege
    state: absent

Inputs

    
name:
    aliases:
    - cn
    description: The list of privilege name strings.
    elements: str
    required: true
    type: list

state:
    choices:
    - present
    - absent
    - renamed
    default: present
    description: The state to ensure.
    required: false
    type: str

action:
    choices:
    - privilege
    - member
    default: privilege
    description: Work on privilege or member level.
    required: false
    type: str

rename:
    aliases:
    - new_name
    description: Rename the privilege object.
    required: false
    type: str

permission:
    description: Permissions to be added to the privilege.
    elements: str
    required: false
    type: list

description:
    description: Privilege description
    required: false
    type: str

ipaapi_context:
    choices:
    - server
    - client
    description: 'The context in which the module will execute. Executing in a

      server context is preferred. If not provided context will be

      determined by the execution environment.

      '
    required: false
    type: str

ipaadmin_password:
    description: The admin password.
    required: false
    type: str

ipaapi_ldap_cache:
    default: true
    description: Use LDAP cache for IPA connection.
    type: bool

ipaadmin_principal:
    default: admin
    description: The admin principal.
    type: str