SLO management with management-zone permissions