Allow EV administration without an interactive service account
For security conscious customers, please consider the ability to allow EV administration without an interactive service account.
For example, to run DTRACE, the VSA must be used, and this account needs to be interactive (e.g. have the ability to log ontp the server).
EV has roles based administration which allows security granularity, but needs the ability to be administered more granularly without the VSA.