Let me guess, someone at some point said Sarbanes-Oxley? Under that restriction, the team running the app must not have access to the app's codebase. And the team writing the app must not have access to the production configuration (and tooling for production).
There's a whole bunch of other things that go into SOX compliance and is something that one should only pursue if required.
There's a whole bunch of other things that go into SOX compliance and is something that one should only pursue if required.