We need the ability to have more granular control on what "remote manage" means. Currently we cannot give our technicians the ability to manage servers because it's all or nothing. We don't want them to have SYSTEM level command line access when all they need to do is occasionally remote into a service account.