Abstract: A method includes receiving a host operation request sent without a first credential that is associated with a first user, wherein the host operation request by a second user includes a second user credential, the second user is an administrator of a systems management application, and the first user has a privilege to perform the host operation request. The method also sends the host operation request to a host operating system agent to generate an authentication token, the host operation request includes a digital certificate associated with the management controller, and the authentication token based on the first user credential of the first user. The method may also receive the authentication token generated by the host operating system agent, and send a response to the host operation request of the second user, wherein the response includes the authentication token.