Abstract: A platform is configured to perform information technology management as a service. An instance of a servicing application is generated in a computing environment for a client entity identifier, such as a tenancy in a cloud platform of a host provider. The servicing application is created, and instantiated, with no pre-authorized permissions within the computing system, or with fewer pre-authorized permissions than another application in the computing system. A certificate of the servicing application is retrieved from a first data structure in a secure storage device of the computing system, an application authentication token is received from an identity service associated with the computing system based on the certificate, and IT management operations are performed in the computing environment by the servicing application instance based on the application authentication token providing authorization for the instance of the servicing application.