AllYourSmurf

@AllYourSmurf@lemmy.world

• ⁨Comment⁩ on ⁨Dedicated admin account or normal privileged users?⁩ ⁨⁨21⁩ ⁨hours⁩ ago⁩:

  Separate admin accounts is a good idea. It can be overdone. For example, you might decide you need one account for proxmox admin, one for network devices, a third for your IAM stack and a fourth for apps. I personally think that’s too much.

  Every human admin needs a separate admin account. If you’re using AI, each agent needs its own privileged access too.

  I recommend having as few privileged accounts as is reasonable. It might make sense to separate network admin from the rest, for example, or some other separation. But it might be fine in your case to have one master-admin account.

  Getting the mapping right is the hard part. Most IdP-aware apps have some way to map roles, groups, or whatever privilege management they use.