Privileged access is logged, time-limited and formally approved
Logging every use of privileged access as part of day-to-day operation is a specific, high-value instance of the activity logging A.8.15 requires.
Approving, time-limiting, logging and periodically re-justifying privileged access day to day is the operational discipline A.8.18 requires for tools that can override normal controls.
Approving, time-limiting and logging privileged grants, with regular re-justification, is the day-to-day discipline that keeps A.8.2's privileged access controlled rather than only documented.