In shortRoles multiply / Flocks beat individuals / Time-box privileges / Audit regularly.
1. Roles multiply
Every exception becomes a new role, until you have 400 and nobody knows what any of them do.
2. Flocks beat individuals
Grant access to a group, not a person. People move around. Groups remain.
3. Time-box privileges
Give the rooster role for four hours when needed, and take it away afterward. Standing admin access is a risk.
4. Audit regularly
Look at who can do what every quarter. You will find surprises, usually in the form of interns.
Written by Bartholomew Brooder, Chief Financial Hen. Disagree? Tell us. We read every message, usually before the second coffee.