prodicus

I am curious about how do you do it, keeping in mind

- different teams having access to only those boxes which belong to that team

- providing ssh access without hand smashing the server.

- revoking ssh access for someone as and when required.

Would also be interested to know of possible ways to do the above.