---
- name: Host member allow_retrieve_keytab absent
  hosts: ipaserver
  become: true

  tasks:
  - name: Host host1.example.com members allow_retrieve_keytab absent for users, groups, hosts and hostgroups
    ipahost:
      ipaadmin_password: MyPassword123
      name: host01.exmaple.com
      allow_retrieve_keytab_user:
      - user01
      - user02
      allow_retrieve_keytab_group:
      - group01
      - group02
      allow_retrieve_keytab_host:
      - host02.exmaple.com
      - host03.exmaple.com
      allow_retrieve_keytab_hostgroup:
      - hostgroup01
      - hostgroup02
      action: member
      state: absent