a new role to allow one of our ldap groups to sudo. Define a variable called sudo_group to use

roles/enable_sudo_group/tasks/main.yml

+---
+- name: template sudoers file
+  template: src=10-admin_group.j2 dest=/etc/sudoers.d/10-admin_group
+  become: true

roles/enable_sudo_group/templates/10-admin_group.j2

+%{{ sudo_group }} ALL=(ALL) ALL