How do I restrict over-broad access permissions?
Run the catalog-level privileges audit โ you'll immediately see who has over-broad access and can start revoking
This graph shows the 5 recommended controls for solving this problem