• Then you start from top.First revoke sysadmin privileges and give less privilege to them better restrict them to database roles and then you can implement.