comments:
Seems like you are sharing passwords a bit too much. Before I retired last year all admins had their on password. We required this for compliance. We would always know who accessed what. We had a few passwords that did have to be shared. For this one we had a more complex than usual password and we locked in this: https://www.amazon.com/dp/B09W8TQ34H?ref=cm_sw_r_cso_cp_apin_dp_GZQ5HN4HCTRQVXW4PV9J&ref_=cm_sw_r_cso_cp_apin_dp_GZQ5HN4HCTRQVXW4PV9J&social_share=cm_sw_r_cso_cp_apin_dp_GZQ5HN4HCTRQVXW4PV9J&rsd=fUhFjL3fiLNoi7axW5v6OSgAns9Q9M0hFF5QwnvPvbqaYkcwr8c5d1nEsr3XI4KW6aMm0k1B8ZxUOjT6A9e1zxKv40mPw96jNoeE9Y3gcHua5w%3D%3D&edk=AQIDAHi1lw%2FM8UbbSMD9ScOOFEmBMHMthHeEhqDaQYPJUAX3jQHXAvcclixb%2FjqR7qWTQ%2BQ6AAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQMmmaeWh7%2F9cLogxgYAgEQgDv%2B4uvzQHv2q1nP2bKrcszjJFe2SEE9Ovz7NwRHw9yYE6Cn5VwwhkDDgv8Njk19A%2FkuBfeTs%2B63bwnIQQ%3D%3D. We set it so that it took 2 admins to unlock it and kept a manual log of access. This doesn’t solve the problem of them exporting the passwords, but if you have separate admin ids for most things and disable their admin id across all platforms when they leave you don’t have to do the bit warden dance you describe.