Securing Access to the ConfigMgr AdminService Over Cloud Management Gateway
Inside the four walls of your network, access to the AdminService is managed by RBAC. However, there are a few options when you expose the AdminService through the Cloud Management Gateway which you should consider.