Thanks for the detailed reply. I envision a setup similar to yours.
We will be using Foreman for ENC, reporting, etc. The Foreman can already
handle segregation of organizations/units/locations with ACLs very nicely
so it should be a good fit for this type of scenario. In addition, we can
easily
Thanks for raising the question! One of the primary points I explored at
this year's PuppetConf was to see what others were doing in this area and
figure out what is possible with the puppet in its current state. Your
mileage may vary on this... and keep in mind we are in the exploration
stages