JIT access
Just-In-Time access — granting elevated permissions only when they're actually needed and only for a limited time, instead of letting users walk around with permanent (standing) privileges. It minimizes the time window during which an account is dangerous if hijacked.
Problem: "standing privileges" (standing access) — an admin who ALWAYS has full permissions — is a big risk: if the account is hijacked the attacker has immediate full power, around the clock. JIT flips it: the permission is normally off; when someone needs to do an administrative task they request access (often with a justification), it's approved (automatically or by a human), granted for, say, 2 hours, and automatically revoked afterward. Win: the attack window shrinks from "always" to "the few hours someone is actually working", every elevation is logged and reviewed, and you approach "zero standing privileges". Often a feature in PAM systems (Privileged Access Management). Related: break-glass access (emergency access when there's a fire). A central modern principle for taming privileged accounts. Related to PAM and break-glass access.