On ma, 23 huhti 2018, Lachlan Musicman via FreeIPA-users wrote:

Am I making hard work of something that is relatively straight forward and
solved elsewhere but I've missed?

Ansible has "ignore_errors: True" available, but I feel that is a weak get
out of jail free card. Given that this is authentication and authorization,
errors shouldn't be ignored (opinion).

Not really answering your question but did you actually look at
https://github.com/freeipa/ansible-freeipa instead of creating new ones?