Someone asked me to create a site for their online business which I did, handling a lot of the development myself. After I created my account on the site I told my employer "Hey, the site is ready you can create an account for yourself now." He did and I gave him some administration privileges from my account.
Then Mr. Showoff told him "Dude, I have root access to the DB which means I can do anything on the site."
He was interested and wanted root access to the DB which I declined. I said it was a bad idea because he doesn't know anything about DB administration or system administration and this can be a security risk. For example, it may conflict with the Principle of Least Privilege or he may accidentally run some dangerous command he doesn't know about.
However, he still thinks that he should have this access because he is the boss.
How can I handle this? Should I not care and give him access for no reason?