Puppet users - Mar 2014 - Ideas to allow users only on certain servers

So at my organization, we have different departments that should only have 
access to certain servers.

For example:

Dev Team: Dev Servers
Tech Support: Production Server
Admins: All servers

How Puppet manages our users now, is once you add the user to the user 
manifest, it adds them too *all *the servers. 

I've tried adding an if/else statement as sort of mentioned here:

https://groups.google.com/forum/#!topic/puppet-users/EA1LKmaFFJ4

But I learned that wasn't best practice.

I've also tried putting users in different classes such as:

users::dev
users::ts
users::admins

However that gets a little redundant...Is there another way to do this 
through Puppet? Or am I better off using something like Active Directory to 
authenticate and manage groups?

Any advice is much appreciated. Thanks!

- Philippe

-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to puppet-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/puppet-users/cafd5282-53c2-4d21-a833-6384bbe396c6%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.