Just-in-time access
In short: Just-in-time access grants permissions only at the moment they are needed and removes them when the task ends. An agent asks for access to finish a job, receives it for minutes or hours, and holds nothing afterwards. It is the opposite of standing privilege.
Which controls use this term?
- GOV-05Short-lived credentials. Issue agents credentials that expire within minutes or hours and are scoped to a task, instead of static keys or long-lived tokens.
- GOV-12Decommission at task end. Remove an agent's identity, credentials and access as soon as its task or project ends, and record when that happened.
Which terms are related?
Non-human identity, Short-lived credential, Standing privilege, Decommissioning.
Reviewed by The Register desk