A permission computing system, comprising: a signature verification engine that is configured to receive a signed user access request, the user access request identifying a user and requesting access to a target resource on a target machine in a remote multi-tenant capacity system to perform a task on the target resource and being received from a remote multi-tenant management system , the signature verification engine being configured to verify a first signature on the user access request as belonging to the multi-tenant management system ; a set of user access accounts ; a role-based access control system that is configured to access the user access accounts and to verify that the user is authorized to perform the task; and a capability token service that, based at least in part on the signature verification engine is configured to verify the first signature, wherein role-based access control system is configured to verify that the user is authorized to perform the task, to generate an output package based on the user access request, and the capability token service further comprising a task package generator that is configured to generate an approved task package indicating that the permission computing system has authorized the user to access the target resource on the target machine to perform the task, wherein the user access request is further signed by a remote client system corresponding to the user and wherein the signature verification engine is configured to verify a second signature on the user access request as belonging to the remote client system, and wherein the capability token service further comprises a signing component that, in response to the signature verification engine is configured to verify the first and second signatures and the role-based access control system is adapted to verify that the user is authorized to perform the task, signing the task with a signing certificate. a signature verification engine that is configured to receive a signed user access request, the user access request identifying a user and requesting access to a target resource on a target machine in a remote multi-tenant capacity system to perform a task on the target resource and being received from a remote multi-tenant management system , the signature verification engine being configured to verify a first signature on the user access request as belonging to the multi-tenant management system ; a set of user access accounts ; a role-based access control system that is configured to access the user access accounts and to verify that the user is authorized to perform the task; and a capability token service that, based at least in part on the signature verification engine is configured to verify the first signature, wherein role-based access control system is configured to verify that the user is authorized to perform the task, to generate an output package based on the user access request, and the capability token service further comprising a task package generator that is configured to generate an approved task package indicating that the permission computing system has authorized the user to access the target resource on the target machine to perform the task, wherein the user access request is further signed by a remote client system corresponding to the user and wherein the signature verification engine is configured to verify a second signature on the user access request as belonging to the remote client system, and wherein the capability token service further comprises a signing component that, in response to the signature verification engine is configured to verify the first and second signatures and the role-based access control system is adapted to verify that the user is authorized to perform the task, signing the task with a signing certificate. <EOS>