Subject: [chef] Chef role based access control for standalone server

You can use active directory integration or you can create local groups and give them appropriate access under the administration tab in chef manage.

But you really should limit the amount of people who have access to the chef server and you should have a CI/CD pipeline that uploads your cookbooks for you from a versioning system. If you have people making a lot of changes to the server directly you can have people who don't know what they are doing causing problems.