It is probably a good idea to seperate production and other environments. Most of devs work is done in non prod environments so you can throw a lot of dev/test

It is probably a good idea to seperate production and other environments. Most of devs work is done in non prod environments so you can throw a lot of dev/test permission at them. Support should be able to support through app permissions only. Devops/oncall will need automated escalation requests for emergencies. A single “XP popup” that gets audited. Elephant in the room is CI. I have no answer. I think CI needs a rethink. CI has a lot of power if hacked.