[CommanderData]

We've had very segmented access for all of our Ops people. It took a while to get used to and made alot of sense at the time.

Any privileged access is done through our jump boxes.

However there are times where we need full access to production like some of our applications would which makes us question the whole point of the excerise.