saltstack repo

pillar_machines.sls

machines:
  theoden:
    owner: javier
    guest: True
  aragorn:
    owner: javier
    de: False
  frodo:
    owner: javier
    laptop: True

pillar_top.sls

base:
  '*':
    - machines
    - users

pillar_users.sls

users:
  javier:
    id: 1000
    fullname: Javier Domingo Cansino
    sudo: True
    shell: /usr/bin/zsh
  userone:
    id: 1001
    fullname: User One
  usertwo:
    id: 1002
    fullname: User Two
  userthree:
    id: 1003
    fullname: User Three
  guest:
    id: 2000
    fullname: Invitado

salt_top.sls

base:
  '*':
    - users

salt_users.sls

{% set machine = pillar.machines.get(grains.nodename, {}) %}
{% if machine %}
{% for usr,attrs in pillar.users.iteritems() %}
{{usr}}:
  user:
    {% if attrs.get('absent',False) %}
    - absent
    {% elif usr=='guest' and not machine.get('guest',False) %}
    - absent
    {% else %}
    - present
    - fullname: {{ attrs.get('fullname', None) }}
    - shell: {{ attrs.get('shell', '/bin/bash') }}
    - home: /home/{{ usr }}
    - uid: {{ attrs.id }}
    - gid: {{ attrs.id }}
    - gid_from_name: True
    - create_home: True
    - groups:
      {% if attrs.get('sudo',False) %}
      - wheel
      {% endif %}
      - tty
      - uucp
      - users
    - optional_groups:
      - adbusers
      - avahi
      - locate
      {% if machine.get('laptop',False) %}
      - rfkill
      {% endif %}
      {% if machine.get('de',True) %}
      - games
      - gdm
      - networkmanager
      - vboxusers
      - wireshark
      {% endif %}
    {% endif %}
{% endfor %}
{% endif %}