What are the best practices for configuring managed accounts for non-privileged access?
For example, 200 developers who need access to multiple servers.
What is the recommended best practice in this scenario?
Specifically: Should each developer have an individual non-privileged domain account?
Is there a better approach for managing a large number of non-privileged users accessing multiple servers (e.g., using groups, role-based access, PAM, etc.)?
Very important: We do not want one developer’s session to be accessible or “stealable” by another developer.
Looking for guidance on how organizations typically handle this setup securely and efficiently.
