The only reason someone would need access to the management account would be maintaining child accounts and IAM roles or reviewing logs, none of which should ne

The only reason someone would need access to the management account would be maintaining child accounts and IAM roles or reviewing logs, none of which should need root.