ansible.windows.win_acl_inheritance_module.rst

ansible.windows.win_acl_inheritance

Change ACL inheritance

• Synopsis
• Parameters
• See Also
• Examples
• Status

Synopsis

• Change ACL (Access Control List) inheritance and optionally copy inherited ACE's (Access Control Entry) to dedicated ACE's or vice versa.

Parameters

Parameter	Choices/Defaults	Comments
path path / required		Path to be used for changing inheritance
reorganize boolean	Choices: no ← yes	For P(state) = absent, indicates if the inherited ACE's should be copied from the parent directory. This is necessary (in combination with removal) for a simple ACL instead of using multiple ACE deny entries. For P(state) = present, indicates if the inherited ACE's should be deduplicated compared to the parent directory. This removes complexity of the ACL structure.
state string	Choices: absent ← present	Specify whether to enable present or disable absent ACL inheritance.

See Also

.. seealso::

   :ref:`ansible.windows.win_acl_module`
      The official documentation on the **ansible.windows.win_acl** module.
   :ref:`ansible.windows.win_file_module`
      The official documentation on the **ansible.windows.win_file** module.
   :ref:`ansible.windows.win_stat_module`
      The official documentation on the **ansible.windows.win_stat** module.

Examples

- name: Disable inherited ACE's
  ansible.windows.win_acl_inheritance:
    path: C:\apache
    state: absent

- name: Disable and copy inherited ACE's
  ansible.windows.win_acl_inheritance:
    path: C:\apache
    state: absent
    reorganize: yes

- name: Enable and remove dedicated ACE's
  ansible.windows.win_acl_inheritance:
    path: C:\apache
    state: present
    reorganize: yes

Status

Authors

• Hans-Joachim Kliemeck (@h0nIg)