Hello,
We execute a script after any server creation that uses the FreeIPA API for adding the sever to the proper Hostgroup. As we already have the HBAC rules created with the hostgroups, the teams that should access to the servers are allowed automatically.
Regards.
