[browningstreet]

I work in a highly regulated environment. Big company.

The DBA team sets up databases and service accounts. They give those accounts to the developers. The two can’t do each others’ jobs. It helps that we are regularly audited.

Have also worked at a startup where things where as you described. I ended that immediately. It took us some time to figure out who needed what and how we could accommodate proper controls.

It really depends on circumstances, but start thinking in terms of “blast radius”.