allows many logical computers to run on the same physical hardware

is used when an application that runs in the cloud is offered as a service

brings securing to the cloud by establishing the right privilege levels for users

enables organizations to bridge the gap between identity access management and cloud services