Authorized to add, delete, or modify services, service instances, or their properties.