except you don't grant them remote computers, you give them the right to create containers/vms/vpses (workspace) based on a template