The site I support uses APEX for queries and minor fixes outside of the application. There are no APEX applications, so no one is categorized as an end-user. All users are "developers", logging on through either a read-only or read-write shared account. There's not a whole lot (nothing) written about this, apparently. It seems logical to add another workspace and assign the DBAs to it with the necessary DBA privileges.
I wanted to ask whether there are other viable approaches and if so, to discuss them. TIA.