According to the Citrix Virtual Apps and Desktops service on Citrix Cloud documentation, the control layer is always managed by Citrix when hosting Citrix Virtual Apps and Desktops on the Citrix Cloud platform. The control layer consists of the Citrix Cloud Connector, Studio, Director, and other components that orchestrate the delivery of applications and desktops. The resource layer, which contains the VDAs, hypervisors, and storage, is managed by the customer or a service provider. The user layer, which contains the user profiles, policies, and data, is also managed by the customer or a service provider. The access layer, which contains the StoreFront and NetScaler Gateway components, can be either managed by Citrix or the customer, depending on the deployment scenario.