IT Team Member Production Access

Summary:

Trying to find the best blend of access for IT Functional Support Teams but not allowing them access to be able to do transactions/change configuration directly in Production.

Content (please ensure you mask any confidential information):

We have been working to try to figure out the best way to allow our support Teams access to Production without them being able to make changes to Production directly. This means being able to traverse all of the screens and setup but not be able to make changes directly in Production without first having roles supplied to them to do so. Today we are using the global Read Only setting even though it has gaps built into it and with the move to Redwood it seems this setting was kind of ignored as now full pages can