--- - name: Service member allow_retrieve_keytab present hosts: ipaserver become: true tasks: - name: Service HTTP/www.example.com members allow_retrieve_keytab present for users, groups, hosts and hostgroups ipaservice: ipaadmin_password: SomeADMINpassword name: HTTP/www.example.com allow_retrieve_keytab_user: - user01 - user02 allow_retrieve_keytab_group: - group01 - group02 allow_retrieve_keytab_host: - host01.example.com - host02.example.com allow_retrieve_keytab_hostgroup: - hostgroup01 - hostgroup02 action: member