There are few basic things, a short explanation.
- Access control : Admin should be able to control access for each and every user separately. If you are using a shared account, above is not possible. For every system, there should be separate SSH account, DB Account, User account, VPN account...