It stores ssh-public-keys in a database and combines them in groups . You can assign these groups to operating system users on target hosts and are able to deploy your configurations.