---
- name: Créer un utilisateur Active Directory
  hosts: AD-peda
  gather_facts: no
  collections:
    - microsoft.ad

  tasks:
    - name: Créer l'utilisateur
      microsoft.ad.user:
        identity: "john.luke"                          # sAMAccountName / UPN sans domaine
        name: "John Luke"                              # cn / display name
        given_name: "John"
        surname: "Luke"
        user_principal_name: "john.luke@actoriaformation.fr"
        email: "john.luke@ad.example.com"
        password: "P@ss1234"
        change_password_at_logon: true
        path: "OU=Users,DC=ACTORIA,DC"                 # adapte à ton domaine réel
        enabled: true
        state: present
      register: user_result

    - name: Afficher le résultat
      debug:
        var: user_result