Authorized access only. Every provisioning run is logged with its full before/after trail and rollback capture.