On each server, why not simply create only those user accounts you want to access each one.
For example, only the CPA's user accounts would be created on their server and only the programming development user accounts would be created on theirs.
For example, only the CPA's user accounts would be created on their server and only the programming development user accounts would be created on theirs.