Posted by: Colin Smith
I am not a developer and I do not want to be and I know that developers have a job to get done but…..
Why is it that developers want to have elevated privileges in production??
That one I think I can answer at least partly.. From my experience it is because they want to test code in production. To that I ask WHY??? I have provided you a DEV, and Test server as well as QA. I do not get it… I know that I want to have the fewest priveledges required to do my job. Now as a DBA that means I get sysadmin role on all my SQL Servers but I do not need a Domain Admin account. I used to have one when I was a Systems Administrator but when I became a DBA I no longer require it. I do not want to have the ability to break something in production when I should be testing in DEV or TEST.
I recently had to do a restore of a prod database because a dev was running test code and blew up some data. I know that it is my fault for not taking away that level of access for them but that is something that I am working on and I just have not won that battle yet. I am getting close and now again this is more ammo for me.