How can I add a user to additional groups with Ansible? For example, I would like to add a user to the sudo group without replacing the user's existing set of groups.

3 Answers 3


According to the User module you can use this:

- name: Adding user {{ user }}  
  user: name={{ user }}
        group={{ user }}

You can just add the groups=groupname and append=yes to add them to an existing user when you're creating them

  • 3
    Thanks, the append=yes is indeed what I'm looking for!
    – vdboor
    Oct 26, 2013 at 9:21
  • 1
    There seems to be an issue with this : what if the user already exists and I just want to add or remove them from a group ? I'm not 100% sure but I think that the "group" attribute is considered only when creating the user.
    – jlecour
    Jul 19, 2016 at 15:41
  • 3
    I really have an issue with this being the accepted answer, as the question does not state "create a user and add it to a specific group". If we come from a Google search because of the question's title, we'd most likely want to add an existing user to a group.
    – Daniel F
    Aug 27, 2018 at 11:06
  • How to do it when using "local=yes"?
    – KumZ
    Apr 28, 2020 at 13:53

If {{ user }} already exists in the system, you should use the following to just add it to a group:

- name: adding existing user '{{ user }}' to group sudo
    name: '{{ user }}'
    groups: sudo
    append: yes

To add it to a set of groups, you can use a comma separated list, for example groups: admin,sudo.

Just beware that if you omit append: yes, your user will be removed from all other groups, according to the usermod man page. That would useful if you want to use a specific list of groups a user should belong to.

  • 24
    …and beware not to write group: without the s, as this will change the primary GID. Jun 15, 2017 at 20:01
  • ... and beware that if the user does not exist it will will be created!
    – EM0
    Jan 24, 2019 at 14:03
  • @EM0 Yes, the user module is supposed to create users if they don't exist, however, the user should review his code if he is trying to modify users that are not even supposed to exist. Jan 24, 2019 at 16:48

Please note that {{ user }} was changed to {{ ansible_user }} in recent Ansible versions (https://github.com/ansible/ansible/blob/c600ab81ee/lib/ansible/playbook/play_context.py#L46-L55). Alternatively, you can also use ansible_ssh_user - it's the same. So, the updated code from Teresa e Junior looks like:

- name: adding existing user "{{ ansible_user }}" to group sudo
     name: "{{ ansible_user }}"
     groups: sudo
     append: yes
   become: yes

More fixes:

  • Use double quotes so the variable expands
  • Add become: yes since it needs administrative privileges to change the groups file

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.