list / elements=string

["root", "toor"]

ini entries:

[defaults]
admin_users = ['root', 'toor']

env:ANSIBLE_ADMIN_USERS

var: ansible_admin_users

list of users to be expected to have admin privileges. This is used by the controller to determine how to share temporary files between the remote user and the become user.

string

"~/.ansible_async"

ini entries:

[defaults]
async_dir = ~/.ansible_async

env:ANSIBLE_ASYNC_DIR

var: ansible_async_dir

Directory in which ansible will keep async job information

string

added in 2.10 of ansible.builtin

ini entries:

[defaults]
common_remote_group = None

env:ANSIBLE_COMMON_REMOTE_GROUP

var: ansible_common_remote_group

Checked when Ansible needs to execute a module as a different user.

If setfacl and chown both fail and do not let the different user access the module's files, they will be chgrp'd to this group.

In order for this to work, the remote_user and become_user must share a common group and this setting must be set to that group.

list / elements=string

[{}]

List of dictionaries of environment variables and their values to use when executing commands.

string

"~/.ansible/tmp"

ini entries:

[defaults]
remote_tmp = ~/.ansible/tmp

env:ANSIBLE_REMOTE_TEMP

env:ANSIBLE_REMOTE_TMP

var: ansible_remote_tmp

Temporary directory to use on targets when executing tasks.

list / elements=string

["/var/tmp", "/tmp"]

ini entries:

[defaults]
system_tmpdirs = ['/var/tmp', '/tmp']

env:ANSIBLE_SYSTEM_TMPDIRS

var: ansible_system_tmpdirs

List of valid system temporary directories on the managed machine for Ansible to choose when it cannot use ``remote_tmp``, normally due to permission issues. These must be world readable, writable, and executable. This list should only contain directories which the system administrator has pre-created with the proper ownership and permissions otherwise security issues can arise.

boolean

added in 2.10 of ansible.builtin

ini entries:

[defaults]
allow_world_readable_tmpfiles = no

env:ANSIBLE_SHELL_ALLOW_WORLD_READABLE_TEMP

var: ansible_shell_allow_world_readable_temp

This makes the temporary files created on the machine world-readable and will issue a warning instead of failing the task.

It is useful when becoming an unprivileged user.