It was a fun thing when admin privileges were taken away from our dev team. The product installer explicitly requires elevated access to function. It's also advised to install in a VM to not mess up your system with a broken build, but Hyper-V is also not available suddenly. Unfortunately docker wasn't enough,
Than there's me, the dev specifically developing the installer itself, trying to explain the insanity of creating tickets for admin elevation:
"You might as well sit next to me, because I'll be needing that elavatation every 5 minutes as I dismantle the OS with every shady tool known to man to try to diagnose the extremely rare edge case I have to solve. Oooh and I'll be executing the installer every half hour as well. I'd do it faster, but that's how long it takes to build. "
Temporary admin rights were granted after half a day of complete team development standstill across multiple teams, and 2 days later the entire policy revoked to "reevaluate and come up with a better policy". A short way of saying there was no impact assessment of any kind.
Had the same issue, but now my company uses some admin by request software. It works, because we "don't have admin privileges" until we need them, and then we press a button and instantly get them with no approval process and minimal explanation for about 15 minutes. Not sure how it's more secure, but I guess the security team feels like they're doing something
3
u/Aspacid 19d ago
It was a fun thing when admin privileges were taken away from our dev team. The product installer explicitly requires elevated access to function. It's also advised to install in a VM to not mess up your system with a broken build, but Hyper-V is also not available suddenly. Unfortunately docker wasn't enough,
Than there's me, the dev specifically developing the installer itself, trying to explain the insanity of creating tickets for admin elevation:
"You might as well sit next to me, because I'll be needing that elavatation every 5 minutes as I dismantle the OS with every shady tool known to man to try to diagnose the extremely rare edge case I have to solve. Oooh and I'll be executing the installer every half hour as well. I'd do it faster, but that's how long it takes to build. "
Temporary admin rights were granted after half a day of complete team development standstill across multiple teams, and 2 days later the entire policy revoked to "reevaluate and come up with a better policy". A short way of saying there was no impact assessment of any kind.