https://ones.com/ja/blog/admin-privileges-best-practices