Identity, RBAC and delegated administration

Give every team the access it needs, from everyday VM tasks to critical infrastructure actions, with the control your platform requires.

How it works

A provider account at the top, with two customer accounts under it. Each customer account has users with roles: a delegated admin who manages the account, and users scoped to tasks such as VMs, backup, networks, firewalls or disaster recovery.

Key benefits

  • One central place for identity and permissions, across every technology

  • Permissions for VM, network, backup, firewall and DR tasks

  • Approved tasks delegated without full platform control

  • An access model enterprise and regulated buyers can trace

  • More users and tenants without informal workarounds

Feature breakdown

  1. Granular, scoped RBAC

    Set access by tenant, account and service area, so permissions match real jobs rather than broad admin roles. Less excess access, and clearer separation of duties.

  2. Delegated administration

    CSPs and MSPs let customer teams manage approved resources, and enterprise IT delegates to business units or application teams. Fewer tickets, with central oversight kept.

  3. Account context switching

    Users move between parent, child and delegated accounts they are approved for, without extra logins or shared credentials. That smooths work in complex account setups.

  4. Audit-ready access

    Permissions are tied to roles and scope, not handed out informally, and you can show it. That supports internal governance, customer checks and procurement reviews.

What it means in practice

Safely expose tenant controls while retaining platform authority.

The right access for every user