Access is managed via PIM (Privileged Identity Management) and based on clinical and technical job functions.
Tier 1: Read-Only
Compliance Auditor
Can view all tags and logs but cannot modify resource state.
Tier 2: Contributor
Cloud Operator
Can modify tags and configurations for assigned CostCenters.