[shamiln]

Most places I’ve worked, has the concepts from above.

Security is lax at most companies but even having worked as an engineer on support rotation, customer anc production access was the last thing I could do and I needed to have exhausted all other options. I don’t feel retaining production access to generate tokens should be a thing.

[m00x]

It depends on the eng. If you're a senior eng with on-call responsibilities, you're getting full time prod access.