If they do SQL Server repository hardening by reducing privileges on PUBLIC role in SQL Server, then CA TDM Portal and Datamaker will stop working. It has caused a reversal of this exact decision with two other banks.
In addition, GTREP user must have the privileges (CREATE) set in our scripts for our products to work. By Definition, the GTREP user can only operate on the GTREP database. Thus, it is still a hardened environment. We use the privileged user to drop tables, create tables, update tables, etc. within our limited scope of operation within the SQL Server.
As more are defined by our Services Department, they can be added here.