---
- set_fact:
    tags_list: "{{ tags_list | default([]) |
    union([[tag.key,tag.value]|join(':')]) }}"
  loop: "{{ lookup('dict', nsg.tags | default({}, true)) }}"
  loop_control:
    loop_var: "tag"

- name: Get security group
  azure_rm_securitygroup_facts:
    ad_user: "{{ azure_ad_user | default(omit) }}"
    password: "{{ azure_password | default(omit) }}"
    subscription_id: "{{ azure_subscription_id | default(omit) }}"
    client_id: "{{ azure_client_id | default(omit) }}"
    secret: "{{ azure_secret | default(omit) }}"
    tenant: "{{ azure_tenant | default(omit) }}"
    resource_group: "{{ nsg.resource_group }}"
    tags: "{{ tags_list | default(omit) }}"
    name: "{{ nsg.name | default(omit) }}"
  register: azure_nsg_facts

- name: Create security group
  azure_rm_securitygroup:
    ad_user: "{{ azure_ad_user | default(omit) }}"
    password: "{{ azure_password | default(omit) }}"
    subscription_id: "{{ azure_subscription_id | default(omit) }}"
    client_id: "{{ azure_client_id | default(omit) }}"
    secret: "{{ azure_secret | default(omit) }}"
    tenant: "{{ azure_tenant | default(omit) }}"
    name: "{{ nsg.name }}"
    default_rules: "{{ nsg.default_rules | default(omit, true) }}"
    purge_default_rules: "{{ nsg.purge_default_rules | default(omit, true) }}"
    rules: "{{ nsg.rules | default(omit, true) }}"
    purge_rules: "{{ nsg.purge_rules | default(true, true) }}"
    append_tags: false
    location: "{{ nsg.location | default(omit, true) }}"
    resource_group: "{{ nsg.resource_group }}"
    state: "present"
    tags: "{{ nsg.tags | default(omit, true) }}"
  register: creatensg
...