win_ansible_role_base_setup/tasks/ansible_user.yml

---
- name: Create Windows group ansibles
  ansible.windows.win_group:
    name: 'Ansibles'
    description: 'Group for Ansible Management'
    state: present

- name: create ansible User
  ansible.windows.win_user:
    name: 'ansible'
    state: present
    password: "{{ lookup('community.general.passwordstore', win_base_init__pass_prefix + '/' + inventory_hostname + '/login/ansible create=true length=42 nosymbols=true') }}"
    account_disabled: false
    description: 'Account to run ansible commands at this WINDOWS host'
    groups_action: 'add'
    password_expired: false
    password_never_expires: true
    user_cannot_change_password: true
    groups:
      - 'Benutzer'
      - 'Ansibles'
      - 'Administratoren'