Im in favor of giving them as much access as possible. "As possible" contains a lot of variables of course, but it's why when a DBA is hired they should find out what is really wanted - do they want data rigidly protected, or a slightly looser approach?