[chef] using chef to provision/deprovision chef server users

[Nick Silkey < >]

Ohai Chefs --

Im curious what others have done to tackle the provision/deprovision of users within a given Chef Server.  

My use case is having to own multiple company product's disparate open-source chef servers.  Im envisioning a workflow where a top-level chef-server manages the foo product's chef server(s), satisfying dev+ops+qe for the foo product are provisioned/deprovisioned.  The same goes for the bar product's chef server(s) + team, the baz product's chef server(s) + team, etc.  This would allow for onboarding already spun-up chef servers and continuing to provide airspace segregation between products.

- Is anyone doing anything like this currently? 

- How is it working out?  Wonderfully?  Terribly?  

- Can alternatives like Private Chef solve this function?

Curious what the community is doing.  Thanks.

-nick