We need to give another IT group limited sysadm permissions to our server. They are basically responsible for a set of data, and we will maintain responsibility for our set