---
- name: ansible user
  user:
          name: "{{ service_account }}"
          groups: sudo
- name: edit /etc/sudoers 
  lineinfile:
    path: /etc/sudoers
    regexp: "^%sudo"
    line: "%sudo ALL=(ALL) NOPASSWD: ALL"
    state: present