• I agree with that 100%. The owner should be a service account that can only access the resources it needs to fulfil its job.

    For me personally, the use of the 'sa' account is a huge no-go!