Goal
Access to production (and stage) must be restricted to engineers on a as-needed principle and in an auditable fashion.
ACSCS Integration should likely have a much broader set of permissions (up to cluster-admin) accessible for engineers developing features.