Glossary
Just-in-Time (JIT) Access
Just-in-time access flips the usual provisioning pattern: instead of granting a permission that persists until someone remembers to remove it, access is requested for a specific task, granted for a bounded window, and withdrawn automatically when that window closes. The permission exists only while it's actually being used, which removes the long tail of forgotten, unused grants that standing access accumulates.
This pattern usually requires more tooling than simply provisioning access once — a request-and-approval flow, an expiry mechanism that actually fires — which is the practical reason many systems default to standing access instead, despite the security tradeoff.