is a type of policy-based management and provisioning rights can be granted on either a permissions-based or role-based basis. Once automated provisioning has been implemented, it is up to the service provider to ensure that operational processes are being followed and governance policies are not being circumvented.