W3cubDocs

/Ansible

win_acl_inheritance - Change ACL inheritance

New in version 2.1.

Synopsis

Change ACL (Access Control List) inheritance and optionally copy inherited ACE’s (Access Control Entry) to dedicated ACE’s or vice versa.

Options

parameter required default choices comments
path
 yes
Path to be used for changing inheritance
reorganize
 no
  • False
  • True
For P(state) = absent, indicates if the inherited ACE's should be copied from the parent directory. This is necessary (in combination with removal) for a simple ACL instead of using multiple ACE deny entries.
For P(state) = present, indicates if the inherited ACE's should be deduplicated compared to the parent directory. This removes complexity of the ACL structure.
state
 no absent
  • present
  • absent
Specify whether to enable present or disable absent ACL inheritance

Examples

# Playbook example
---
- name: Disable inherited ACE's
  win_acl_inheritance:
    path: 'C:\apache\'
    state: absent

- name: Disable and copy inherited ACE's
  win_acl_inheritance:
    path: 'C:\apache\'
    state: absent
    reorganize: yes

- name: Enable and remove dedicated ACE's
  win_acl_inheritance:
    path: 'C:\apache\'
    state: present
    reorganize: yes

This is an Extras Module

For more information on what this means please read Extras Modules

For help in developing on modules, should you be so inclined, please read Community Information & Contributing, developing_test_pr and Developing Modules.

© 2012–2016 Michael DeHaan
© 2016 Red Hat, Inc.
Licensed under the GNU General Public License version 3.
https://docs.ansible.com/ansible/win_acl_inheritance_module.html