---
- hosts: all
  become: True
  become_method: sudo
  roles:
    - sssd_simple_access_provider
    - ssh-deny-root