What does your company do to allow developers (and others) to make adhoc queries (select or update) on prod db in a way that can be reviewed and is compliant with soc2?

One company i worked for built a little web interface for queries and then for write queries you opened a PR with a script using the backend framework ORM. Then devops would review the PR. As a developer it stunk.