[13:23:12] is there a reasonable way to give a single NDA user temporary access to a production host? [13:23:32] the host is insetup if that matters [13:33:58] does the access for that user have an equivalent exisiting access group? (like wdqs-admins e.g.) [13:34:14] if so, you can add hieradata/hosts/foo.yaml [13:34:24] with profile::admin::groups: [13:34:34] - wdqs-admins [13:35:10] moritzm they do have a group, I'll check it out. Thanks for the advice!