---
name: Create AD Admin 
block:
  - name: Create user in AD
    microsoft.ad.user:
      name: "{{ username }}"
      firstname: "{{ firstname }}"
      surname: "{{ lastname }}"
      groups:
        add:
          - "{{ domain_admin_group }}"

        password: "{{ password }}"
        password_expired: false
        state: present

rescue:
  - name: Removing failed User
    microsoft.ad.user:
      name: "{{ username }}"
      state: absent

  - name: Trigger Failure
    ansible.builtin.fail: