Privileged Access

Hello Guys

Hope you are doing well.

we have a +2k environment with multiple applications installed + vendor products all over the environment which its becoming almost impossible to maintain with sudo, for example a hadoop environment where there is a team in charge of the support of hadoop but not in charge of the OS, if root access is given to them they touch OS configuration files causing damage , the same happens with other applications . we have a large sudo profile per application which its becoming difficult to maintain plus the time that requires to develop a new profile for new applications.

i wonder how do you guys manage these cases and what do you suggest.

thanks in advance.