--- - name: Playbook to handle sudocmdgroups hosts: ipaserver become: true tasks: - name: Ensure sudocmds are absent in sudocmdgroup ipasudocmdgroup: ipaadmin_password: SomeADMINpassword name: network sudocmd: - /usr/sbin/ifconfig - /usr/sbin/iwlist action: member state: absent