Question

What specific type of privilege management is used to grant a user temporary access rights that expire immediately after the assigned task is finished?

Accepted Answer

The specific type of privilege management used to grant temporary, time-bound access rights is called Just-in-Time (JIT) access. JIT access operates on the principle of least privilege, which states that a user should have only the minimum access necessary to perform their job and only for the duration required. Instead of a user having permanent administrative rights, the system grants elevated permissions only when a specific task is initiated. These permissions are tied to a predefined expiration period, such as one hour or until the completion of a specific workflow, after which the system automatically revokes the rights. This process eliminates standing privileges, which are persistent access rights that remain active indefinitely, thereby reducing the risk of unauthorized access or credential theft. An example of JIT access is an IT administrator who needs to update a server configuration; the administrator requests access, the system grants the necessary permissions for that single session, and once the configuration task is saved and the window closes, the administrative rights are immediately removed.

Home → All Courses → Engineering and Technology Courses → Zero Trust Security Architecture → Flashcard

What specific type of privilege management is used to grant a user temporary access rights that expire immediately after the assigned task is finished?