Yes, this is currently a big ask, and understandbly so.

There are a few SaaS companies that exist today which provide similar service, and they all require this level of access, unless you opt for their enterprise self hosted version.

I am probably going to release a self hosted version at some point.