A request is received from a first agent, the request having a filesystem namespace and an operation identifier (ID) identifying one or more operations to be performed within the file system namespace. In response to the request, a security unit is identified based on a first agent ID identifying the first agent. It is determined whether the security unit contains an operation set ID corresponding to the operation ID of the request. It is determined whether the security unit contains information identifying a set of one or more file system management object (FSMOs) associated with the requested filesystem namespace. The one or more operations are allowed to be performed on the one or more FSMOs, in response to determining that the security unit contains information matching the operation ID of the request and the filesystem namespace of the first request.