Just-in-Time (JIT) Access

Granting elevated permissions only when needed, for a limited duration, and revoking them automatically. JIT eliminates standing privilege, the largest contributor to blast radius after compromise.