I’d assume they’re using cloud, so permissions are scoped per service. For example, if they used aws, they could have S3 create but no delete, and the role has no permissions to IAM (aws equivalent of permission policy)

If they just have some linux server then they can manage with users and have write permissions restricted to owner of the file.

They probably just let AI assume Admin and let it do whatever because nontechnical people don’t understand least permission