Some non-They users should, once the a best habit, have only standard representative membership access, some It personnel may keeps numerous levels, logging in since a simple associate to execute techniques employment, if you are logging toward an effective superuser account to perform management situations.
Given that management account keeps so much more privileges, and therefore, twist a greater chance when the misused or abused versus practical representative membership, a good PAM most readily useful routine will be to use only these manager levels when essential, and for the smallest time necessary.