--- - name: ansible user user: name: "{{ service_account }}" groups: wheel - name: edit /etc/sudoers lineinfile: path: /etc/sudoers regexp: "^%wheel" line: "%wheel ALL=(ALL) NOPASSWD: ALL" state: present