Do you need root for ansible?

Question

Ansible

Good day!
I'm starting to use ansible and I can't understand the essence of privilege escalation for administering systems through playbooks on ansible. In short, do I need a root account on the systems I'm going to configure with ansible?
1. If not, then poke your nose at the sudo example of the same user who connects via ssh to configure the system, because this user is in the sudo (wheel) group and can administer systems.
2. If so, how to enable the root account USING ANSIBLE on systems where the root account is disabled? After all, to enable root, you need privilege escalation, and privileges are elevated using the root account, and it is disabled, and to enable it ... well, you understand me.

Answer 1

You need to specify ONLY the following variables:

ansible_connection=ssh
ansible_ssh_user=user
ansible_ssh_pass=user
ansible_become=yes
ansible_become_method=sudo

Answer 2

sudo user is needed, not necessarily root
https://docs.ansible.com/ansible/2.5/user_guide/be...
- become

Answer 3

2. If so, how to enable the root account USING ANSIBLE on systems where the root account is disabled? After all, to enable root, you need privilege escalation, and privileges are elevated using the root account, and it is disabled, and to enable it ... well, you understand me.

The root account cannot be disabled - it runs Linux services, including the kernel.
Another issue is that interactive root login can be disabled - and this is normal, because for many years instead of login as root, the sudo command has been used to "inherit" root rights. Naturally, sudo must be configured for the user on the system (or another tool for privilege escalation).

Answer 4

just elevate via sudo