diff --git a/inventory.yaml b/inventory.yaml
index fbd2dcc..043ef80 100644
--- a/inventory.yaml
+++ b/inventory.yaml
@@ -3,6 +3,7 @@ all:
   vars:
     skylab_state_dir: /var/run/skylab
     skylab_ansible_venv: "{{ skylab_state_dir }}/ansible-runtime"
+    skylab_secrets_repository: git@vcs.enp.one:skylab/skylab-ansible-secrets.git
     ansible_user: ansible
     ansible_python_interpreter: "{{ skylab_ansible_venv }}/bin/python"
     ansible_ssh_common_args: "-o ControlMaster=auto -o ControlPersist=60s -o ForwardAgent=yes"
@@ -14,3 +15,4 @@ en2:
     hubble:
       ansible_host: en2a.enp.one
       skylab_description: Cloud Web Server
+      skylab_targets: [cloud]
diff --git a/vars/access.yaml b/vars/access.yaml
new file mode 100644
index 0000000..d842c85
--- /dev/null
+++ b/vars/access.yaml
@@ -0,0 +1,26 @@
+---
+skylab_accounts:
+  - name: enpaul
+    uid: 1300
+    fullname: Ethan N. Paul
+    targets: [cloud]
+    admin: true
+
+  - name: ansible
+    uid: 1400
+    targets: [cloud]
+    admin: true
+    service: true
+    password: $y$j9T$w/pIBtZIMo3PmXccZ.LHi1$AbMVIks.P10CyuK8tWt21O4JuLpKGpWTFgX0WlTbiw6
+
+skylab_group:
+  name: skylab
+  gid: 1200
+
+skylab_group_admin:
+  name: skylab_admin
+  gid: 1201
+
+skylab_group_automation:
+  name: skylab_auto
+  gid: 1202