User:Greg (WMF)/Scratch/NDA access groups

Basic
 * privileged RT account

Monitoring
 * include Basic
 * Graphite
 * Logstash
 * Ishmael
 * shell (until glorious future when everything is in Logstash)

Deployment
 * include Basic
 * include Monitoring
 * shell

shell should be separated into the puppet classes:

class admins::roots { class admins::mortals { class admins::restricted { class admins::labs { class admins::jenkins { class admins::dctech { class admins::globaldev { class admins::privatedata { class admins::fr-tech { class admins::parsoid {