This has been true for a long time, however I am wondering if there is an opportunity here. Why do IT admins get full rights to read data? Their job is to get

This has been true for a long time, however I am wondering if there is an opportunity here. Why do IT admins get full rights to read data? Their job is to get the systems running, but somehow right now this means carte blanche from a systems perspective. It is easier to build a tool like that of course. The problem arises with configuration of access rights, whoever has edit rights on that config, controls the system. Nuclear launch procedures have the famous 2 keys sequence where at least two people need to be involved - even if this is only Hollywood, the idea itself is quite interesting. In IT systems this would mean some sort of approval process where any risky operation would need to get requested and confirmed by another party. You want a full data dump? Wait a sec, care to explain why? Of course this wouldn't be foolproof, but better than the systems today, no?