A method includes configuring, by a cloud provisioning server, a first user identity to execute a provisioning to provision an instance. The instance to be provisioned includes one of an instantiated software resource and a computing service. The method also includes configuring a second user identity to be an approver of the provisioning. The method also includes performing provisioning of the instance. The provisioning is executed under the first user identity, and the second user identity has provided approval of the provisioning.