In https://gerrit.wikimedia.org/r/#/c/mediawiki/extensions/OpenStackManager/+/548939/ and https://gerrit.wikimedia.org/r/#/c/mediawiki/extensions/OpenStackManager/+/549999/, the following user rights were removed from MediaWiki-extensions-OpenStackManager:
Currently, cloud admins are granted accessrestrictedregions, editallhiera, listall, managednsdomain, and manageproject in InitialiseSettings, and the "shell users" group is likewise granted loginviashell
Those rights should be removed, since they no longer actually grant any rights. This would leave cloud admins with only userrights and autopatrol, and the group should be considered for merging with local stewards, who only have userrights and noratelimit. This would leave the shell users group with no rights, and so the members of the group should be removed. There are currently over 500 such users.
Once the shell user group is removed from config, WikimediaMessages should be updated to remove the group from translation (and if cloud admins are merged into stewards, those should also be removed).