Create accounts, Verify Resource Isolation Use the new account to creates users, roles, grant the privilege