IT should have a system of roles and permissions that allows administrators to log in as other user if necessary to install updates or reset passwords. This acc

IT should have a system of roles and permissions that allows administrators to log in as other user if necessary to install updates or reset passwords. This access should be logged and ideally periodically audited by a 3rd party. Sharing a password is dangerous because it is impossible to determine who used the password to perform a malicious act.