The adminAccess setting in controller.toml decides per image whether the VM owner has root or sudo (Linux) or Administrator (Windows) rights, so owners can install software and run privileged commands without an image rebuild. It defaults to false, applies to the owner only (also set managersAsAdmin = true to include co-owners and managers), and is fixed when the image is prepared. Network isolation, encryption, authentication and audit logging apply either way.
3.10.42 is the new baseline for VM images. Images built with older VM Installer versions keep receiving VM Controller updates, but some new functionality may not work without the 3.10.42 installer.