Not necessarily. In my experience large corporations have a ton of internal tooling that no one knows about, even internally. Say in a company with 6000 employe

Not necessarily. In my experience large corporations have a ton of internal tooling that no one knows about, even internally. Say in a company with 6000 employees scattered around the globe, tough luck knowing whether some developer made a one-off tool to debug something and used the company's LDAP to authenticate, and then the app connects to some db full of stuff. Years back I stumbled upon such a tool that had a web shell that allowed you to do pretty much anything using some dev's account - anyone with a company email could access it. This is far more frequent than you might think in large corporations. In small companies, typically everyone has access to everything and if that isn't the case, more often than not, you will ask someone to go and fetch something for you and the third time around, they will get fed up with it and give you full access so you don't bother them anymore. 6 months down the line, everyone has access to everything. Or if a small to mid-sized company sees people that clearly know what they are doing, they commonly give them full access to everything so they can get on with it. Like at my current job I've had root access to everything, everywhere since day 1.