use become: yes when root is needed

tasks/xpack/security/elasticsearch-security.yml

@@ -12,12 +12,14 @@
 
 #Copy Roles files
 - name: Copy role_mapping.yml File for Instance
+  become: yes
   template: src=security/role_mapping.yml.j2 dest={{conf_dir}}/x-pack/role_mapping.yml owner={{ es_user }} group={{ es_group }} mode=0644 force=yes
   when: es_role_mapping is defined
 
 #-----------------------------AUTH FILE----------------------------------------
 
 - name: Copy message auth key to elasticsearch
+  become: yes
   copy: src={{ es_message_auth_file }} dest={{conf_dir}}/x-pack/system_key owner={{ es_user }} group={{ es_group }} mode=0600 force=yes
   when: es_message_auth_file is defined
 
@@ -25,6 +27,7 @@
 
 #Ensure security conf directory is created
 - name: Ensure security conf directory exists
+  become: yes
   file: path={{ conf_dir }}/security state=directory owner={{ es_user }} group={{ es_group }}
   changed_when: False
   when: es_enable_xpack and '"security" in es_xpack_features'