[ConservativeMind]

If all the people involved cannot identify who had Admin access, we have a major problem.

[palmer]

If all the people involved cannot identify who had Admin access, we have a major problem.

Who says they can't? The only claim is that people got non-admin accounts which is the absolutely correct thing to do. Giving everyone an admin account would be a huge integrity problem because anyone could change anything.