# jit-access

Source: https://startwithidentity.com/glossary/jit-access/
Last updated: 2026-08-29
License: content by Start with Identity. Cite the source URL.

---

Granting elevated permissions only when needed, for a limited duration, and revoking them automatically. JIT eliminates standing privilege, the largest contributor to blast radius after compromise.

Just-in-time access is the most effective single change available to a privileged access program, because it converts a permanent target into a time-boxed one. It only works if the request path is fast enough that engineers use it rather than routing around it, which usually means approval automation and chat-based requests rather than a ticket queue. Measure standing privilege count as the outcome, not the number of requests processed.

See also: [zero standing privileges](https://startwithidentity.com/glossary/zero-standing-privileges/), [what is PAM](https://startwithidentity.com/guides/fundamentals/what-is-pam/), [least privilege](https://startwithidentity.com/glossary/least-privilege/), [PAM vendors](https://startwithidentity.com/vendors/pam/)