diff --git a/ansible/roles/win_user/tasks/assert.yml b/ansible/roles/win_user/tasks/assert.yml index 82dc4d7..e749368 100644 --- a/ansible/roles/win_user/tasks/assert.yml +++ b/ansible/roles/win_user/tasks/assert.yml @@ -49,6 +49,15 @@ quiet: true when: user_action == 'disable' + - name: Check User Info [ENABLE] + ansible.builtin.assert: + that: + # - username checked already + - study_code is defined # so can be removed from group (WIP) + - user_role is defined # so can be removed from group (WIP) + quiet: true + when: user_action == 'disable' + - name: Check User Info [MODIFY] ansible.builtin.assert: that: @@ -77,6 +86,9 @@ register: folder delegate_to: "{{ os_project }}-{{ win_project }}-fs01" failed_when: folder.stat.exists == false + when: | + user_action == 'create' or + user_action == 'modify' - name: Verify User block: diff --git a/ansible/roles/win_user/tasks/enable.yml b/ansible/roles/win_user/tasks/enable.yml new file mode 100644 index 0000000..5b33cd5 --- /dev/null +++ b/ansible/roles/win_user/tasks/enable.yml @@ -0,0 +1,9 @@ +--- +- name: Enable AD user + block: + - name: Enable user in AD + microsoft.ad.user: + name: "{{ username }}" + path: ou=Project Users,dc={{ win_project }},dc=loc + state: present + enabled: yes \ No newline at end of file diff --git a/ansible/roles/win_user/vars/main.yml b/ansible/roles/win_user/vars/main.yml index 7241096..06b8e38 100644 --- a/ansible/roles/win_user/vars/main.yml +++ b/ansible/roles/win_user/vars/main.yml @@ -1,4 +1,4 @@ study_folder: \\{{ win_project }}.loc\Study_Data\{{ study_code }} exporter_group: "{{ study_code }}-exporter" -valid_actions: ["create", "reset", "disable", "modify"] \ No newline at end of file +valid_actions: ["create", "reset", "disable", "enable", "modify"] \ No newline at end of file