Optimized security with administrator user

roles/native-user-administrator/Readme.md

@@ -1,4 +1,4 @@
 # Role Administrator
 This role creates an standard administrator user.
+This user needs to type in his password before executing sudo. 
 For security reasons it's recommended to use this user instead of the standard root user.
-Please consider the concerns in this article https://unix.stackexchange.com/questions/92123/rsync-all-files-of-remote-machine-over-ssh-without-root-user.  

roles/native-user-administrator/files/administrator.conf

@@ -0,0 +1,2 @@
+Defaults targetpw
+administrator ALL=(ALL) ALL

roles/native-user-administrator/tasks/main.yml

@@ -14,7 +14,7 @@
     group: administrator
     mode: '0644'
 
-- name: grant administrator sudo rights without password
+- name: grant administrator sudo rights with password
   copy:
-    content: '%administrator ALL=(ALL) NOPASSWD: ALL'
-    dest: /etc/sudoers.d/administrator
+    src: "administrator.conf"
+    dest: /etc/sudoers.d/administrator.conf