tessera-labs/census

Declarative provisioner of Unix access objects — role-accounts, groups, sudoers and limits — from a role-store. Outside the auth path.