Read it in a court document I am too lazy to look up - he separately had admin on the virtualization (VMSphere?) management plane and used it to rollback whatev

Read it in a court document I am too lazy to look up - he separately had admin on the virtualization (VMSphere?) management plane and used it to rollback whatever server did access management for the system in question to a previous snapshot where he still had admin access to that system.