Just-in-time Permissions
- •
def
- •
granting elevated (admin/root) access for a limited time only, rather than assigning permanent administrator rights — an application of least privilege
- •
- •
mechanism
- •
access requested from a central clearinghouse, which grants or denies based on predefined policy; primary credentials are stored in a password vault, and temporary/ephemeral credentials are issued for a single session, then deleted
- •
- •
benefit
- •
a breached user account never has standing elevated rights, narrowing the scope of any breach
- •
- •
related