A virtualization management system between the hardware and the hypervisor enforces access control on both hypervisors and VMs, giving different users different levels: read-only on a guest's administrative interface, control of particular guests, or full administration. Mandatory access control style isolation protects the hypervisor's code and separates VMs, and the service level agreement includes the controls that secure external interoperations.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.