update..

roles/common/tasks/users.yml

@@ -95,24 +95,6 @@
   tags:
     - authorized_key
 
-# ---
-# - extra system user
-# ---
-
-- name: (users.yml) extra system user exists?
-  user:
-    name: '{{ item.name }}'
-    state: present
-    system: yes
-    home: '{{ item.home }}'
-    shell: '{{ item.shell|d("/usr/sbin/nologin") }}'
-  loop: "{{ extra_system_user }}"
-  loop_control:
-    label: '{{ item.name }}'
-  when: extra_system_user is defined and extra_system_user|length > 0
-  tags:
-    - user-exists
-
 # ---
 # - extra system groups
 # ---
@@ -127,6 +109,25 @@
   tags:
     - groups-exists
 
+# ---
+# - extra system user
+# ---
+
+- name: (users.yml) extra system user exists?
+  user:
+    name: '{{ item.name }}'
+    state: present
+    system: yes
+    home: '{{ item.home }}'
+    shell: '{{ item.shell|d("/usr/sbin/nologin") }}'
+    groups: '{{ item.groups | default(omit) }}'
+  loop: "{{ extra_system_user }}"
+  loop_control:
+    label: '{{ item.name }}'
+  when: extra_system_user is defined and extra_system_user|length > 0
+  tags:
+    - user-exists
+
 
 # ---
 # - Take care backup host has rsa key to connect via ssh to the other hosts