Techniques and solutions are provided for organizing and controlling access/operations with respect to computing objects, such as a definition of a computing object or data associated with an instance of a defined computing object. A collection of computing objects is associated with a namespace, the namespace having a namespace identifier. At least a first set of access rights is associated with the namespace, such as access rights of a first tenant, representing a computing environment to which the computing objects of the namespace may be deployed. The access rights specify permitted/prohibited operations with respect to the computing objects, such as whether the computing objects are available on a read-only basis or whether create, update, or delete operations are also allowed. A namespace can have multiple tenant accessors, where different tenants can have different access rights for a given namespace.