I like the idea of having a "Break Glass" function.
I believe that my clients should have access to all of the systems and accounts that they pay for. HOWEVER I do not beleive that they should ever access them or provide them to someone else except in extreme circumstances.
I would like the ability to provide the client access to credentials via the portal but when they click to access the credentials they get a customised warning that they should not be accessing them except in case of emergency and that access or sharing or credentials may void any support agreement and lead to additional charges..
Additonally an alert should be sent to a nominated admin for that client.
This serves several puposes.
Provides access but warns of consequences.
Alerts admin that client or external party may be access ing systems and making changes.
Warns us that a client may be looking to obtains support elsewhere.