gistfile1.txt

Just fixing the syntax issues in:

class profile::sec::sec_model {
  hiera_hash('users').each |String $user, Hash $user_hash| {
    $user_hash.each |String $attr, String $value| {
        user { "$user":
            "${attr}" => "${value}"
       }
    }
  }
}

I would end up with:

class profile::sec::sec_model {
  lookup('users').each |String $user, Hash $user_hash| {
    user { $user: * => $user_hash }
  }
}

Noting:

- hiera_hash is deprecated, use lookup
- you had a redundant inner loop that didn't really make sense
- I think you imagined the code was going to be "eval"ed although Puppet has no eval