initial data.yaml for users/groups

this defines only operations people who are defined
currently in admins.pp -> admins::roots, and applied
them to two hosts that will have no prod impact.

Change-Id: I97e36c06d2fd497b571596ea13bbd4babd95ae7a