# user management for IPA/IdM domains

**URL:** <https://forum.ansible.com/t/user-management-for-ipa-idm-domains/21534>\
**Category:** Ansible Project\
**Created:** [May 24, 2016, 3:29am UTC](https://forum.ansible.com/t/user-management-for-ipa-idm-domains/21534 "2016-05-24T03:29:44Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![jdelaporte](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/jdelaporte/32/366_2.png) [@jdelaporte](https://forum.ansible.com/u/jdelaporte)\
**Post date:** [May 24, 2016, 3:29am UTC](https://forum.ansible.com/t/user-management-for-ipa-idm-domains/21534/1 "2016-05-24T03:29:44Z")

</div>

I am wondering if there are any plans to add an an Ansible module to manage users on RedHat IdM and/or FreeIPA servers?

I believe the regular user module wouldn’t currently work for managing users in FreeIPA, since it creates local /etc/passwd users, but I am pursuing migrating my Linux domain authentication to IdM/IPA. I incorporate Ansible wherever I can, so I’d like to put these two together.

I know custom attributes are an option with IPA, and that it could be an absolute pain to write a module, but it would be fantastic to be able to do add/change/delete, including the required and default assigned values.

Is anyone on this list managing IPA/IdM user administration, group memberships, and hbac lists with Ansible? If so, do you use a lot of command/shell, or do you prefer a different method?

Thanks!  
Joanna Delaporte