By default, the root user is able to SSH to each appliance in the Filr system. You can disable this access on each appliance so that only the vaadmin user can SSH to the system.
For information about how to disable SSH access for the root user, see Section 2.1, Changing Administrative Passwords.