This is a good best practice in general. There are tools that can automate/audit this to reduce friction on the users. See: Privileged account management; the

This is a good best practice in general. There are tools that can automate/audit this to reduce friction on the users. See: Privileged account management; there are a lot of players.