Identity, RBAC and delegated administration
Give every team the access it needs, from everyday VM tasks to critical infrastructure actions, with the control your platform requires.
How it works
Key benefits
One central place for identity and permissions, across every technology
Permissions for VM, network, backup, firewall and DR tasks
Approved tasks delegated without full platform control
An access model enterprise and regulated buyers can trace
More users and tenants without informal workarounds
Feature breakdown
Granular, scoped RBAC
Set access by tenant, account and service area, so permissions match real jobs rather than broad admin roles. Less excess access, and clearer separation of duties.
Delegated administration
CSPs and MSPs let customer teams manage approved resources, and enterprise IT delegates to business units or application teams. Fewer tickets, with central oversight kept.
Account context switching
Users move between parent, child and delegated accounts they are approved for, without extra logins or shared credentials. That smooths work in complex account setups.
Audit-ready access
Permissions are tied to roles and scope, not handed out informally, and you can show it. That supports internal governance, customer checks and procurement reviews.
What it means in practice
Safely expose tenant controls while retaining platform authority.
Run managed services with clear customer and operator boundaries.
Delegate responsibly across business units and platform teams.
Meet access control expectations with operationally usable governance.