--- - assert: that: ansible_user_id != "root" - include_vars: '{{ansible_os_family}}.yaml' - name: create /etc/sudoers.d/{user} config file become: true template: src: sudoers dest: '/etc/sudoers.d/{{ansible_user_id}}' owner: '{{sudo_owner}}' group: '{{sudo_group}}' mode: '0440'