We sell managed and partially managed services to our customers.
e.g.
a client gets a custom developed website from us and also emails. he should not touch the website but it would be good if he could add e-mail adresses, change spam settings, etc.
for us it would be enough to limit on the navigation levels, for e.g. apps, files, databases, etc.