win_ansible_role_obs_setup/tasks/obs_user.yml

---
- name: Fail if win_obs_init__password is unset
  ansible.builtin.fail:
    msg: "Please define a password for 'win_obs_init__password'!"
  when: win_obs_init__password == 'changeME'

- name: "Create User {{ win_obs_init__user }}"
  ansible.windows.win_user:
    name: "{{ win_obs_init__user }}"
    state: present
    password: "{{ win_obs_init__password }}"
    account_disabled: false
    description: 'Account to run OBS at this WINDOWS host'
    groups_action: 'add'
    password_expired: false
    password_never_expires: true
    user_cannot_change_password: true
    groups:
      - 'S-1-5-32-545'  # Users
  register: _user