The team leads of a development environment want to limit developer access to a specific set of VMs.What is the most efficient way to enable the team leads to directly manage these VMs?