userMgmtSample.yml

#
# (c) 2023 Thales Group. All rights reserved.
# Author: Anurag Jain, Developer Advocate, Thales
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#  http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
---
  - name: "Sample playbook for Group and User Management on CipherTrust Manager"
    hosts: localhost
    connection: local

    vars_files:
      - vars/userMgmt.yml

    tasks:
    - name: "Create new user"
      thalesgroup.ciphertrust.usermgmt_users_save:
        localNode: "{{ this_node_connection_string }}"
        op_type: "create"
        username: "{{ var_username }}"
        password: "{{ var_password }}"
        email: "{{ var_email }}"
        name: "{{ var_name }}"
      register: output

    - name: "Get user ID from its name"
      thalesgroup.ciphertrust.cm_resource_get_id_from_name:
        localNode: "{{ this_node_connection_string }}"
        query_param: "username"
        query_param_value: "{{ var_username }}"
        resource_type: "users"
      register: user

    - name: "Update user info"
      thalesgroup.ciphertrust.usermgmt_users_save:
        localNode: "{{ this_node_connection_string }}"
        op_type: "patch"
        cm_user_id: "{{ user['response']['id'] }}"
        username: "{{ var_username }}"
        email: "{{ var_new_email }}"
        name: "{{ var_new_name }}"

    - name: "Change user password"
      thalesgroup.ciphertrust.usermgmt_users_save:
        localNode: "{{ this_node_connection_string }}"
        op_type: "changepw"
        username: "{{ var_username }}"
        password: "{{ var_password }}"
        new_password: "{{ var_new_password }}"

    - name: "Update self"
      thalesgroup.ciphertrust.usermgmt_users_save:
        localNode: "{{ this_node_connection_string }}"
        op_type: "patch_self"
        name: "{{ var_new_self_name }}"

    - name: Debug Output
      debug: var=output