Which the exception if the dashboard (which is code committed to github ), all of them require some level of access to our infrastructure.
I don't really have details on the dashboard, I can tell you that current dashboard is flakey and times out, and newer dashboard stops working after a while (why is the big question).
The good thing is that there's some granularity we can control on those things (for example, if you are upgrading JIRA you just need access to the machine running JIRA, not all of them). In order to investigate the spam users, it's probably a matter of giving rest api access and so on.
So, this is the kind of work that might be hard for a student, but it could be somewhat fine for someone with a little bit more experience.