Use "become:yes" on every task

[prevostc]

Since ansible 1.9, "become: yes" is the recommended privilege escalation method. It offers more flexibility to the role user and allow a role to mix root and non-root commands explicitly

http://docs.ansible.com/ansible/become.html

[thefinn93]

This is needed when ansible logs in as non-root initially? Or what? I'm not really sure I understand (it works for me...)

[prevostc]

Exactly, sorry for the lack of details. I'm using ansible locally and I don't want to run every role as root. Also, this allow users to define a specific "privileged user" with --become-user=BECOME_USER and --become-method=BECOME_METHOD. This is recommended by the ansible documentation here: http://docs.ansible.com/ansible/become.html

[thefinn93]

I see. I guess I thought there was a way to run the entire role with become but I guess not.