# {{ ansible_managed }} root ALL=(ALL) ALL {% for user in managed_users %} {% if user.sudoer %} {{ user.name }} ALL=(ALL) NOPASSWD: ALL {% endif %} {% endfor %}