@bignose Sure, that describes the feature. I'm looking for the label, not the description, though. Not every service supports this way of working. For those that do, I want to be able to say, for example, "Oh, Digital Ocean supports PAMT" or "FooBar Inc doesn't do PAMT, so you just have to use a role account."