Just-in-Time Access Management

The concept of just-in-time (JIT) access management is a strategy that aligns real-time requests for usage of accounts directly with entitlements, workflows, and appropriate access policies. Companies use this strategy to secure accounts from continuous real-time access (known as standing privileges) by restricting them based on appropriate behavior, context, and other ephemeral properties. This decreases the risk of an always-on account that can be leveraged by a threat actor outside of acceptable use policies and procedures. This method requires organizations to establish criteria for just-in-time access and accept that these accounts are not available outside of potentially break-glass scenarios.