A method for a tenant and service management system of a data center of managing access to one or more services (110A-M) by a plurality of users (102A-N, 110A-M), the method comprising: receiving, at the tenant and service management system, an identification that uniquely identifies a service and a description of a set of one or more resources offered by the service; recording, at the tenant and service management system, into a blockchain database a smart delegation contract between the service and the tenant and service management system, wherein the smart delegation contract includes the identification of the service, an identification of the tenant and service management system, and the description of the set of resources, and the smart delegation contract is cryptographically signed with a cryptographic private key of the service that is part of a cryptographic public-private key pair for the service and with a cryptographic private key of the tenant and service management system that is part of a cryptographic public-private key pair for the tenant and service management system; receiving from a requestor, at the tenant and service management system, a request to access the service; authorizing, by the tenant and service management system, the requestor to access the service based at least in part on the smart delegation contract between the service and the tenant and service management system, subscribing, by the tenant and service management system, to a topic for obtaining updates for the set of resources; receiving, at the tenant and service management system, based on the topic, an update for at least one attribute of a resource from the set of resources following publication of the update by the service; and updating, at the tenant and service management system, the smart delegation contract on the blockchain database based on the received update for at least one attribute. receiving, at the tenant and service management system, an identification that uniquely identifies a service and a description of a set of one or more resources offered by the service; recording, at the tenant and service management system, into a blockchain database a smart delegation contract between the service and the tenant and service management system, wherein the smart delegation contract includes the identification of the service, an identification of the tenant and service management system, and the description of the set of resources, and the smart delegation contract is cryptographically signed with a cryptographic private key of the service that is part of a cryptographic public-private key pair for the service and with a cryptographic private key of the tenant and service management system that is part of a cryptographic public-private key pair for the tenant and service management system; receiving from a requestor, at the tenant and service management system, a request to access the service; authorizing, by the tenant and service management system, the requestor to access the service based at least in part on the smart delegation contract between the service and the tenant and service management system, subscribing, by the tenant and service management system, to a topic for obtaining updates for the set of resources; receiving, at the tenant and service management system, based on the topic, an update for at least one attribute of a resource from the set of resources following publication of the update by the service; and updating, at the tenant and service management system, the smart delegation contract on the blockchain database based on the received update for at least one attribute.