A good practice in IT security is to give users the least privilege necessary and only for a short duration, as this limits what an attacker can do. Administrators should use their admin accounts only for admin tasks, and not for regular use.