Owner/Admin access only.
Provision users and enforce access policy.
Privileged actions and access outcomes.