This message was deleted.

That’s how I see it done with hosting providers. Typically if it’s shared clusters it’s a no go, but if it’s dedicated hosts in a shared VC, then yep, delegated access locked to the customer hosts

I worked a decade ago for a Cloud provider that did exactly that. So yeah, be careful on the permissions, and you're good to go!