- 01Permanent admin rights are a legacy default. Just-in-time access (right to elevate to admin only for a defined task, defined window) is the realistic upgrade. Zero standing privilege is the destination.
- 02The model: default state has no privileged rights, elevation request for a specific resource and time, automated approval for low-risk and human approval for high-risk (with logging), session recorded with auditable commands, automatic expiry with verified cleanup.
- 03Operationally: routine admin tasks gain a 30-60 second elevation step — friction is real but not painful once habituated. Emergency response paths must be designed in: break-glass accounts with strong protections, on-call elevation with after-the-fact justification.
- 04Measurable outcomes: count of identities with persistent admin rights (monthly), elevations per administrator per week, percentage of recorded sessions reviewed monthly. Numbers move in the right direction or the program is not working.
Permanent administrative rights are a legacy default. Just-in-time access — the right to elevate to admin only for a defined task, for a defined window — is the realistic upgrade. Zero standing privilege is the destination.
The model
- 01Default state — administrators have no privileged rights
- 02Elevation request — for a specific resource, for a specific time
- 03Approval — automated for low-risk, human for high-risk, with logging
- 04Use — session is recorded, commands are auditable
- 05Expiry — privileges drop automatically; cleanup verified
What changes operationally
Routine admin tasks gain a 30-60 second elevation step. The friction is real but not painful once habituated. Emergency response paths must be designed in — break-glass accounts with strong protections, on-call elevation with after-the-fact justification.
Measurable outcomes
Standing-privilege reduction: count of identities with persistent admin rights, monthly. Elevation use: count of elevations per administrator per week. Session reviews: percentage of recorded sessions reviewed monthly. The numbers move in the right direction or the program is not working.