When it comes to user account management, security is important. As we discussed in the section entitled Centralizing user account management with LDAP, Ansible is not designed specifically for enforcement or auditing— however, it can help us greatly. Let's consider a few of the security risks around user management that Ansible can help to mitigate, starting with the sudoers file.