{%- set id = salt['grains.get']('id') -%} {%- set roles = salt['nbroles.get'](id) -%} {{ saltenv }}: '*': - common {% for role in roles %} 'roles:{{ role }}': - match: grain - role.{{ role }} {%- endfor %} '{{ id }}': - ignore_missing: True - id.{{ id.replace('.', '_') }}