You can have 120 privileged accounts locked down and set a 7-day max for...

https://speedy-wiki.win/index.php/What_Should_a_Rollback_Plan_Include_for_SaaS_Production_Changes%3F

You can have 120 privileged accounts locked down and set a 7-day max for temporary access, but without solid governance, risks still slip through the cracks