I work in software at a large corpo and I don’t normally have access to install anything that doesn’t come from the company’s internal repository of third party apps.
But there is a pre installed app on my laptop that i can use to get temporary admin access for my laptop in a few seconds. But while the temporary admin access is on, everything I do gets logged for accountability. I’ve used this temp admin before for setting some environment variables.
Most things I work on happen in a big cloud provider (AWS, GCP, Azure, etc.) and the role I have access to on our cloud provider account has very limited privileges (esp in prod). Adding a new privilege to the role needs to go through two rounds of peer review + one round of managed review.
ahh, the same approach I briefly went through for my dairy intolerance.