Guacamole Users group

ansible/roles/win_domain_controller/defaults/main.yml

@@ -0,0 +1 @@
+guacamole_user_group: "Guacamole Users"

ansible/roles/win_domain_controller/tasks/setup.yml

@@ -123,6 +123,14 @@
         password: "{{ file_manager_password }}"
         state: present
         password_never_expires: yes
+      
+    - name: Create Guacamole Users group for RDP access
+      microsoft.ad.group:
+        name: "{{ guacamole_user_group }}"
+        description: "Allow remote logon for guacamole users"
+        path: "cn=Users,dc={{ win_project }},dc=loc"
+        scope: domainlocal
+        category: security
   when: inventory_hostname in groups['meta-name_dc01']