Cybersecurity Glossary
Just in Time Access
Elevated rights that are granted for a defined window and expire on their own.
What Just in Time Access means
Instead of leaving an administrator role permanently assigned, the person requests it when a task needs it and the role disappears afterwards. The rights exist for an hour or a day rather than for years, so a compromised account is usually a normal account rather than an administrative one.
Why Just in Time Access matters for small businesses and nonprofits
The permanent administrator is the most common finding in small company reviews, and it is almost always accidental. Somebody needed access for an afternoon in 2023. Time bound access removes the need to remember to take it away.
What to do about Just in Time Access
- Turn on time bound elevation for administrative roles wherever your platform supports it
- Require a short written reason for each elevation, so there is a trail to review
- Set a calendar reminder to review who still holds standing rights, quarterly
Not sure where you stand on this?
We review your current setup against the basics, tell you plainly what is covered and what is not, and give you a ranked list with effort and cost. No jargon and no scare tactics.
Elevated rights that are granted for a defined window and expire on their own.