group_vars still needs for vars: in playbook

[Kai_Stian_Olstad]

You still need to provide the provider, how else is the module going to know where to connect?
The difference is only where you specify cisco_asa, the task asa_config should be equal in both cases.