...
Add/remove rights to/from users
Restrict users to specific cloud services, regions, machines, clusters and databases instance types
Access users' cloud accounts' budget consumption and cloud resources' allocation at any time
Lock or unlock individual cloud accounts
Adjust cloud accounts' budgets
...