--- user_source: "kanidm-native" allowed_groups: "{{ [ 'desktop_users' ] }}"