A friend of mine, who is the only IT manager at a small non-technical company, is in a tricky situation with their new Operations Manager. After their previous boss resigned, they've been solely responsible for IT. The Operations Manager, who isn't technically savvy, is asking for admin access to the company's database. My friend feels uncomfortable granting this access due to a lack of clear justification from the Operations Manager and concerns about job security and competence. They want to know how to approach this request and whether they should comply or push back, especially in a poorly managed company without defined policies.
4 Answers
If you end up granting access, do it in writing. Clearly outline any potential risks and make sure their actions are logged. If they mess up, it's on them, but you've covered your bases.
Honestly, when your manager asks for access, it's usually best to just grant it. It could be a problem later if you refuse their request. Make sure to document everything, though—both the request and your reasons for any pushback. It protects you if something goes wrong later.
Totally agree! But remember, it's not just about following orders blindly. If you document your concerns and give them access anyway, you're showing that you took the right steps.
Definitely have those records! If this manager does make mistakes, at least there's a paper trail to protect you.
Don't be afraid to have a discussion. Ask why they really need this access. If they can't give a good answer, push for limits. A non-tech person shouldn't just be granted unlimited access without clear justification.
Exactly! It’s not just about saying 'no.' It’s about ensuring everyone understands the implications of having that level of access.
Right, and don't hesitate to bring in higher-ups if necessary. If they don’t understand the risks, they shouldn't be making the request.
If they’re not super technical, giving admin access is a risk. Maybe set up a read-only account for them instead? Explain the Principle of Least Privilege—it's a standard way to minimize risks.
Exactly! They shouldn't need full access if they can do their job with less. Let's not forget that granting unnecessary privileges could create huge issues down the line.
100% agree. Having that written record is essential. You also want to make sure they know this isn't your responsibility if anything goes haywire.