This happens at my job a lot lol I'll need to do something that I don't have authorization to do so I have to ask a manager, they have no idea what the policy is, why I'm asking them about it, or how to actually do any of it. They end up just doing a screen share and letting me make the change from their system
The weakest part of any security system are the people ...... your security is only as good as the people who use the system.
I don't work in any corporate systems but I know many people who work in factories, mines, government, hospitals, institutions who should all know or at least be aware of the most basic digital security measures ... yet the majority of their passwords for everything is still 12345678 ... a good number of them also share personal emails with their name and birth year on it.
Almost all of them either have never heard of or just don't like using two factor authentication.