1. A method for configuring a machine in a cloud-based computing environment, the method comprising: receiving, by a management server for a cloud-based computing environment provided by a third-party cloud infrastructure service, a request from a first machine or virtual machine instance to configure a second machine or virtual machine instance hosted in the cloud-based computing environment; identifying, by the management server, an access control right associated with the first machine or virtual machine instance making the request; determining, by the management server, a scope associated with the first machine or virtual machine instance based on the access control right; authorizing, by the management server, the request within the scope based on the access control right; transmitting, by the management server, an instruction to perform the request using the determined scope.