Scope of Access Request is the usual implementation. An employee should not be able to iterate millions of records without first asking for temporary powers.

Scope of Access Request is the usual implementation. An employee should not be able to iterate millions of records without first asking for temporary powers. You set the scope by measuring the usual required, and putting in a procedure for when and how much various supervisors can expand it. Different departments will have different needs. This stuff is already built in to industry standard software like SAP.