We have a set of firecall IDs, governed by a change management system, that have the necessary rights in production/DR. You can retrieve the password and log in with the firecall only if you have an approved change number or a high-severity incident ticket number. You cannot use these accounts in your day-to-day business.