Role-based access with an encrypted credential & key vault
Built-in roles from viewer to org admin, scoped per project, plus an encrypted vault for credentials and SSH keys — scoped per tenant, project, or individual host, and revealed only to those authorized.