Role-based access control (RBAC) is great for managing permissions, but it has a few downsides. It can get complicated in larger organizations, with too many roles leading to confusion. Sometimes, roles aren’t flexible enough for specific tasks, and tracking changes can be difficult—like the issue you mentioned with unauthorized configuration changes. Tools like Okta, OpManager, or AWS IAM can help. They offer features like audit trails, alerts, and access reviews, so you can track who’s doing what. Have you tried using any of these tools? You can also read upon customizable RBAC. They can really simplify managing access and avoid issues like the one you faced!