How is your application support group structured?
Summary:
How is Application Support structured regarding Granting Access, creating new or modifying Job roles ensuring SOD, change management for configuration and migrating items like BI and OTBI to production?
Content (please ensure you mask any confidential information):
Hello we are running into some issues and concerns with auditors on theoretical "what ifs" such as ability to grant yourself elevated access or create and move your own BI process. We currently have developers/sys admins in one group(they can only make changes in Dev and need to log ticket with approval to have changes moved to Test then Prod) and application admins in another. They are responsible for moving approved items to test then prod and maintenance of Job roles and assigning access as approved via tickets.. The issue is they could theoretically make