From a3b26b7d5ca1d09f619e865a4ec8f134f6e4fec3 Mon Sep 17 00:00:00 2001
From: abrown38 <a.brown@epcc.ed.ac.uk>
Date: Thu, 5 Sep 2024 14:50:26 +0100
Subject: [PATCH] Create exporter group

---
 ansible/roles/win_study/tasks/create.yml | 10 ++++++++++
 ansible/roles/win_study/vars/main.yml    |  1 +
 2 files changed, 11 insertions(+)

diff --git a/ansible/roles/win_study/tasks/create.yml b/ansible/roles/win_study/tasks/create.yml
index 10ed519..b25ab97 100644
--- a/ansible/roles/win_study/tasks/create.yml
+++ b/ansible/roles/win_study/tasks/create.yml
@@ -22,3 +22,13 @@
         scope: domainlocal
         category: security
       delegate_to: "{{ os_project }}-{{ win_project }}-dc01"      
+
+    - name: Create Exported AD group (Protected Only)
+      community.windows.win_domain_group:
+        name: "{{ exporter_group }}"
+        description: "{{ study_code }} exporter"
+        path: "ou=Project Groups,dc={{ win_project }},dc=loc"
+        scope: domainlocal
+        category: security
+      delegate_to: "{{ os_project }}-{{ win_project }}-dc01"
+      when: project_zone == 'protected'
diff --git a/ansible/roles/win_study/vars/main.yml b/ansible/roles/win_study/vars/main.yml
index acd5324..cb0a177 100644
--- a/ansible/roles/win_study/vars/main.yml
+++ b/ansible/roles/win_study/vars/main.yml
@@ -1,2 +1,3 @@
 study_folder: \\{{ win_project }}.loc\Study_Data\{{ study_code }}
 archive_folder: "{{ studydata_drive_letter }}:\\Archived_Studies"
+exporter_group: "{{ study_code }}-exporter"