Just-in-time access
Also known as JIT
Granting elevated access only at the moment it is needed and revoking it automatically afterwards.
Standing privilege is the problem being solved. An account that is permanently an administrator is permanently valuable to an attacker; one that can request elevation for two hours is valuable only during those two hours.
It applies beyond identity roles: server access, database access, and vendor access all benefit from the same pattern.
Where this comes up
Just-in-time access sits inside our identity and access work. If you are trying to work out what this means for your own environment rather than in the abstract, that is the page worth reading next, and a short call will get you a straight answer faster than either.
Related terms
Privileged Identity Management Making administrative roles available on request and for a limited time, rather than assigned permanently. Least privilege Giving every account only the access it needs to do its job, and nothing beyond that. Privileged access management Controlling, monitoring, and recording the use of accounts that hold elevated rights.