[GranularRecipe]

> Removing admin from people who don't need it is 100% the correct thing to do according to any IT guidelines you could quote. And of course, every single user will whine that they're special and really really need it.

You assume that "suddenly none of the IT employees at the agency could do their jobs properly anymore" is whining and not substantial?

Shouldn't be least privilege principle a culture (a standardised and automated process) and not something that happens ad hoc?

[Neil44]

Yes I do assume that... I've worked in IT for a long time. That phrase in a ticket would be an immediate eye roll from me. A lot of the quotes in the article trigger my eye roll reflex actually. But there is some stuff in there that warrants an explanation/double check to be fair.