Using AE in production to create user ac in dev

Hi,

I am just wondering if anybody is using Access Enforcer in the production environment to create user accounts in SAP development and QA systems as well as production. I am trying to work out what this would entail. Would the roles need to be added to Access Enforcer 3 times, once for each environment?