We have an offshore support team coming online to support our servers as DBAs for 24x7 support. However, there are several instances that have a limitation due to contracts that limit offshore access to our data.
What security needs to be added to give them effective control over the servers as DBAs, but limits them to not being able to read/write data?
The instances are in mixed mode, but it would most likely be applied through a AD users group. SQL Server 2016 and Windows Server 2016.