MediaServe clients and admins/techs quick access to the website container's shell
+1 This could be fine. Client's often want terminal access via the webpanel.
MediaServe admins with root access to the root shell would be nice too
-100 very bad. If you need to drop into root from panel literally just copy the server IP listed right on the page and connect (assuming keybased auth)! You want a public facing webpanel to have root access to every server in the estate? If someone finds a vulnerability in the panel or a weak password they can infect the ENTIRE estate including backup servers. Just to save 2 seconds and a quick copy and paste?
MediaServe As the Enhance estate grows it can be confusing equating just an IP address to the shell
This isn't an issue for any competent sysadmin. You could just use sub domains that points to each server with a standard naming structure that works for you. Ie role-serverLocation-datacenter.domain.com
