summaryrefslogtreecommitdiffstats
path: root/ansible_collections/cyberark/pas/rulebooks/disable_user.yml
blob: 9b86ca8bb58e79178557809ab7f216f915300d1a (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
---
- hosts: all
  connection: local

  collections:
    - cyberark.pas

  tasks:

    - name: Logon to CyberArk Vault using PAS Web Services SDK
      cyberark_authentication:
        api_base_url: "https://BASE_URL"
        validate_certs: false
        username: "USERNAME"
        password: "PASSWORD"

    - name: Disabling a CyberArk User
      cyberark_user:
        username: "{{ username }}" #this is password from the running yml when condition is met
        disabled: true
        cyberark_session: "{{ cyberark_session }}"
      register: cyberarkaction
        
    - name: Debug message
      debug:
        var: cyberarkaction

    - name: Logoff from CyberArk Vault
      cyberark_authentication:
        state: absent
        cyberark_session: "{{ cyberark_session }}"

    - name: Sending an e-mail using Gmail SMTP servers
      community.general.mail:
        host: SMTPSERVER
        port: PORT
        username: username@mail.com
        password: password
        to: First Last <first.last@mail.com>
        subject: Ansible-Rulebook Report
        body: Ansible Rulebook disabled Cyberark user '{{ username }}' due to too many login attempts.
      delegate_to: localhost