diff --git a/roles/ipa/client/tasks/hbac.yml b/roles/ipa/client/tasks/hbac.yml
index 2d4c6c5202..9fc417aab0 100644
--- a/roles/ipa/client/tasks/hbac.yml
+++ b/roles/ipa/client/tasks/hbac.yml
@@ -2,6 +2,7 @@
 
 - name: Check that sysadmin-main group exists
   command: "ipa group-show --no-members sysadmin-main"
+  changed_when: False
 
 - name: "Give members of group sysadmin-main access to anything, anywhere"
   ipahbacrule: