Separate remote site management.
For server and endpoint protection. We need the ability to delegate management of resources based on site location. So we have a remote site with servers and endpoints managed by a network engineer at that site. We want him to be able to manage only those systems while including them in our overall cloud portal. We need to be able to restrict his access to only those systems.