The operator has access to monitoring information, but is restricted from changing settings for performance, network configuration, feature licenses, user accounts or custom roles. The operator is also restricted from inserting and deleting virtual volumes.