ansible/playbooks/root.yml

#!/usr/bin/env ansible-playbook
---
- hosts: all,!unifi
  vars:
    root_shell: /bin/bash
    root_password: "{{ vault_root_password }}"
  roles:
    - root_account
...