windows-ansible/ansible/roles/win_study/tasks/permissions.yml

---
- name: Set permissions
  tags: set_permissions
  block:
    - name: Add study group permissions to study folder
      win_acl:
        path: "{{ item }}"
        state: present
        type: allow
        user: "{{ study_code }}"
        rights: Read,Write,Modify,Delete
      loop: ["{{ study_folder }}", "{{ study_folder }}\\export"]

    - name: Add Domain Admin permissions to study folder
      win_acl:
        path: "{{ item }}"
        state: present
        type: allow
        user: "{{ domain_admin_username }}"
        rights: "FullControll"
      loop: ["{{ study_folder }}", "{{ study_folder }}\\export"]

    - name: Add file-transfer user permissions to study folder
      win_acl:
        path: '{{ study_folder }}\export'
        state: present
        type: allow
        user: file-transfer
        rights: 'FullControl'

    - name: Remove Users permissions
      block:
        - name: "Remove Users permissions from {{ study_folder }}"
          win_acl:
            path: "{{ study_folder }}"
            state: "{{ item }}"
            type: allow
            user: "Users"
            rights: "FullControl"
          loop: ["present", "absent"]

        - name: "Remove Users permissions from {{ study_folder }}\\export"
          win_acl:
            path: "{{ study_folder }}\\export"
            state: "{{ item }}"
            type: allow
            user: "Users"
            rights: "FullControl"
          loop: ["present", "absent"]

        - name: "Remove Users permissions from {{ study_folder }}\\import"
          win_acl:
            path: "{{ study_folder }}\\import"
            state: "{{ item }}"
            type: allow
            user: "Users"
            rights: "FullControl"
          loop: ["present", "absent"]