**OPTIONAL:** privilege escalation (sudo) sometimes relies on the "ansible_become_password" variable in group_vars/all/var_pass.yml file (it should be vaulted):
```bash
cd ansible/group_vars/all/
ansible-vault create var_pass.yml
```
```
---
ansible_become_password: your password to sudo privileges on the target machines
...
```
**N.B:** The provider / consumer installation mode is handled with the "irods_server_mode" variable in host_vars/myhost1.mydomain.tld file:
The ansible-playbook command will then ask you to input either one or two passwords in order to decrypt your vaulted variables.
The ansible-playbook command will then ask you to input your password in order to decrypt your vaulted variables.
**N.B:** in case you'd need a password to become another user using "sudo", just add the "-K" option to your ansible-playbook command line, and you'll be prompted for it.