That's the way it is, policies get put in place to protect the organization and tech stack as a whole. Documentation and separation of concerns is the norm.