Tenant administrators and business group managers use blueprints to control which actions are available for machines that are provisioned from the blueprint.

The actions settings and entitlements specified for the multi-machine blueprint override settings in the component blueprints. For example, if you have a component blueprint that is restricted to userA and you add it as a component of a multi-machine blueprint that is available to everyone, the business group can provision the restricted machine as part of a multi-machine service. However, only userA can provision it as a standalone machine.