Merge branch windows-ansible:main into main

ansible/roles/win_user/tasks/assert.yml

@@ -49,6 +49,15 @@
         quiet: true
       when: user_action == 'disable'
 
+    - name: Check User Info [ENABLE]
+      ansible.builtin.assert:
+        that:
+        # - username checked already
+          - study_code is defined # so can be removed from group (WIP)
+          - user_role is defined  # so can be removed from group (WIP)
+        quiet: true
+      when: user_action == 'disable'
+
     - name: Check User Info [MODIFY]
       ansible.builtin.assert:
         that:
@@ -77,6 +86,9 @@
       register: folder
       delegate_to: "{{ os_project }}-{{ win_project }}-fs01"
       failed_when: folder.stat.exists == false
+  when: | 
+    user_action == 'create' or
+    user_action == 'modify'
 
 - name: Verify User
   block:

ansible/roles/win_user/tasks/enable.yml

@@ -0,0 +1,9 @@
+---
+- name: Enable AD user
+  block:
+    - name: Enable user in AD
+      microsoft.ad.user:
+        name: "{{ username }}"
+        path: ou=Project Users,dc={{ win_project }},dc=loc
+        state: present
+        enabled: yes