If you declare users as virtual resources , you can then use ‘realize’ or the collection syntax ( User <| … |>). Here’s an example:
@user { 'foo':
groups => ['somegroup'],
membership => minimum,
}
Then realize that virtual user with then collection syntax:
User <| title == foo |>
And elsewhere you can add to the parameters for that virtual resource using plusignment:
User <| title == foo |> { groups +> "svn" }