Enterprise way to handle server access
I dont know exactly how to properly title this question.
The problem is, ... we have a set of tickets that the infrastructure team needs to take care. In order to work them out they need access to the servers, sometimes with sudo/root privileges.
Is there a way to handle access to servers with temporal users that can be delete after a while automatically, and also to disallow this users to change their own settings as well as disallowing them to create new users or another root specific...