Seems like it's the default that employees have privileged access like this unless it is explicitly designed out of the system. It's hard to do that even in dom

Seems like it's the default that employees have privileged access like this unless it is explicitly designed out of the system. It's hard to do that even in domains much simpler than a cloud.