Subject: [chef] Chef role based access control for standalone server


You can use active directory integration https://docs.chef.io/server_ldap.html or you can create local groups and give them appropriate access under the administration tab in chef manage.

But you really should limit the amount of people who have access to the chef server and you should have a CI/CD pipeline that uploads your cookbooks for you from a versioning system. If you have people making a lot of changes to the server directly you can have people who don't know what they are doing causing problems.

---