User creation for protected zone

ansible/roles/win_user/tasks/assert.yml

@@ -1,6 +1,6 @@
 ---
 
-- name: Check User Action
+- name: Check User Action is valid
   ansible.builtin.assert:
     that: 
       - user_action is defined
@@ -19,10 +19,11 @@
           - username|length <= 20
         quiet: true
 
-    - name: Check User Info 
+    - name: Check User Info [CREATE]
       ansible.builtin.assert:
         that:
           - study_code is defined
+        # - username checked already
           - password is defined 
           - firstname is defined 
           - lastname is defined 
@@ -31,6 +32,31 @@
         quiet: true
       when: user_action == 'create'
 
+    - name: Check User Info [RESET]
+      ansible.builtin.assert:
+        that:
+        # - username checked already
+          - password is defined
+        quiet: true
+      when: user_action == 'reset'
+
+    - name: Check User Info [DISABLE]
+      ansible.builtin.assert:
+        that:
+        # - username checked already
+          - study_code is defined # so can be removed from group (WIP)
+          - user_role is defined  # so can be removed from group (WIP)
+        quiet: true
+      when: user_action == 'disable'
+
+    - name: Check User Info [MODIFY]
+      ansible.builtin.assert:
+        that:
+          - study_code is defined
+          - user_role is defined  
+        quiet: true
+      when: user_action == 'modify'
+
 - name: Check Study folder & group
   block:
     - name: Check AD group exists