Review risk: Excessive administrator rights on internal systems

Over the years engineers received broad administrator rights on the internal servers and the identity provider, more than their work needs. Broad rights make the damage of one stolen or misused account larger.

Measures

Administrator rights now go through role-based groups with an approval and an expiry, and the system owners review the groups every quarter. The groups were cut back to the people who need them.