Administrator accounts are strictly controlled and separated from regular accounts
Keeping administrative privileges in separate, approved, tracked accounts is A.5.15's least-privilege principle applied specifically to the accounts capable of the most damage.
Mandating separate dedicated admin accounts with management approval and a current register is the policy foundation A.8.2's privileged access control depends on.