--- - name: Service member allow_create_keytab absent hosts: ipaserver become: true tasks: - name: Service HTTP/www.example.com members allow_create_keytab absent for users, groups, hosts and hostgroups ipaservice: ipaadmin_password: SomeADMINpassword name: HTTP/www.example.com allow_create_keytab_user: - user01 - user02 allow_create_keytab_group: - group01 - group02 allow_create_keytab_host: - host01.example.com - host02.example.com allow_create_keytab_hostgroup: - hostgroup01 - hostgroup02 action: member state: absent