ansible-role-users/tasks/main.yml

---
- include_tasks: group.yml
  with_items: "{{ users_groups.keys() }}"
  loop_control:
    loop_var: group

- include_tasks: user.yml
  when: ansible_default_ipv4.address in users[username]['passwords'] or users[username]['passwords'].get('default')
  with_items: "{{ users.keys() }}"
  loop_control:
    loop_var: username