main.yml

# do:
- name: Create user, ansible, with a key & wheel
    user:
      name: ansible
      shell: /bin/bash
      groups: wheel
# don't:
- name: Allow the ansible user to sudo to root by adding it to the wheel group in /etc/group
    lineinfile:
      path: /etc/group
      backup: yes
      # match 'wheel:x:10:' not followed by 'ansible'
      regexp: '(wheel:x:10:(?!ansible))(.*)'
      # insert 'ansible' into line
      # example:
      #  before: wheel:x:10:cgrzecka
      #  after:  wheel:x:10:ansible,cgrzecka
      line: '\1ansible,\2'
      backrefs: yes