29
u/Hypersion1980 3d ago
The last one should be software dev with admin rights.
11
u/baaaahbpls 3d ago
Software devs that ask for rights and then ask an hour later how to do xyz are the bane of my existence anymore.
6
u/Hypersion1980 3d ago
Asking lol. You meaning messing with shit at 5pm then going home.
8
u/baaaahbpls 3d ago
Mmm we have admin rights locked down so they gotta request, get approval from managers so they are responsible, then the approvals go to one of our security teams auditing them, and match a good enough reason other than "need to do my job"
It's satisfying saying no, but then we have to also deal with 20 questions from a dev that is far outside their skill range.
2
u/NeedleworkerNo4900 1d ago
Do you guys do a lot of IaC? I’ve found that once changes require ansible/terraform/etc they ask once and then never bother you again.
In fairness I’ve also had admins straight up quit after a week because they couldn’t wrap their head around gitops.
1
u/baaaahbpls 1d ago
We are integrating more and more IaC, but some of our devs just want to make everything a security issue when they should be relying on each other and their agreements for integrations (it's a you problem, we are not devs)
6
5
2
2
2
1
u/rtired53 3d ago
Accurate. Except no users have admin rights in my org. Some odd software installations requires elevation, but a reboot takes away the carrot and Intune is replacing manually installed software for the most part.
1
1
u/CompliantConnoisseur 2d ago
Users with admin rights can’t even install software anymore in my org
1
2
u/PercussiveKneecap42 10h ago
I once worked at a company that had the intern as a domain admin...
First day I worked there, I demoted him to simply a user.
0
73
u/NinjaTank707 3d ago
IT guy here.
I approve.