Make use of meticulous least benefit for staff profiles, giving read or admin access only where duties demand it.
https://list.ly/lundurlizl
Make use of meticulous minimum privilege for workers accounts, providing read or even admin access just where tasks need it.