customer managed, administrator approved