Customer ownership
Only a customer administrator grants or revokes provider authority.
Administer customer identity-security workflows without shared authority.
Customers grant named provider operators exact, expiring permissions for threat and posture workflows. Provider tokens stay bound to the provider tenant; every customer operation requires a live delegation, executes through a customer-side delegated principal, and records evidence for both parties.
- Customer ownership
- Operator separation
- No cross-tenant bleed
What you can evaluate
Customer-controlled multi-tenant administration through guarded APIs.
Operator separation
Each delegation names provider operators and a closed permission set.
No cross-tenant bleed
Provider requests are token-bound to their own tenant and separately checked against the target customer.
Delegation evidence
Grant, delegated action, expiration, and revocation are recorded in both tenant audit chains.
Follow Managed service providers from identity to evidence.
Each consequential action moves through the same six control points. See where 2AYE evaluates authority, requests human review, and preserves the outcome.
- 01IdentityWho or what is acting
- 02IntentSigned purpose and limits
- 03PolicyDeterministic evaluation
- 04ApprovalA named human when required
- 05ExecutionSingle-use grant, redeemed at the resource
- 06EvidenceReceipt joined to the audit chain
A practical adoption path
Start with one consequential workflow. Prove the boundary before expanding.
Assess
Document the environment, threat model, and integration boundary.
Design
Select protocols, signals, policies, and failure behavior.
Validate
Test vendor-specific APIs, tenant isolation, and abuse paths.
Release
Mark available only after deployed end-to-end verification.
What this includes
- Customer-granted, expiring, named-operator delegation
- Provider tokens bound to the provider tenant and checked against the target customer
- Delegated execution through a customer-side principal
- Grant, action, expiry and revocation evidence for both tenants