Role-specific checklists are not necessary; a good admin will deploy pre-configured images (.VHDx).
In any event, not suggesting you pry them out at all; simply obtaining the access should be enough to keep them on their best behavior.
Integrity is doing the right thing, even when nobody is watching.