User access to the cloud environment can be administered in all of the following ways except:

Customers commonly directly administer their own user access to cloud resources using tools like Azure AD or AWS IAM.

The customer consumes cloud services and manages their own user access to those services, typically through the cloud provider's Identity and Access Management (IAM) tools. It is not the customer's role or responsibility to provide administrative services or manage access on behalf of the cloud provider for the provider's own infrastructure or internal operations; this would be a reversal of the typical service consumer-provider relationship.

In managed service offerings or specific service agreements, a cloud provider may administer user access to the customer's resources as part of the service provided.

Many organizations delegate cloud access administration to third-party managed security service providers or IT consultants.