"As the sysadmin for our research project, I want to manage access rights of project participants to resources in the cloud"
(From another perspective, "As the administrator of the national cloud service, I want to delegate management of research project-specific users/subtenants to sysadmins of the respective project.")
Terminology notice: a “subtenant” roughly corresponds to an OpenStack (Keystone) Project (these used to be called “Tenant”). In the SWITCHengines model, the “real” tenants in the business sense are the academic institutions.
...