At the large tech company I work at, we get two machines- one for day to day dev work and one for sensitive tasks. I get full admin on the day to day dev box an

At the large tech company I work at, we get two machines- one for day to day dev work and one for sensitive tasks. I get full admin on the day to day dev box and can do all sorts of email and collaboration on it, but I can’t do certain administrative functions or access some types highly sensitive data. The admin box is severely locked down, uses a different identity, but lets me edit shared services and access sensitive data. It can be annoying, but it feels about the right level of paranoia to me.