Identity & Endpoint

Identity & Access

Workforce and reporting-organisation identities · phishing-resistant MFA, adaptive access, just-in-time privilege and identity threat detection

Just-in-time requests

Request	Requester	System	Role	Duration	Justification	Status
JIT-5301	T••••• R•••••	AFC OS production database	Operator	1 hour	CHG-2026-1182 index change	Pending
JIT-5299	I•••• K••••	SIEM administration	Administrator	4 hours	Detection rule release 26.10	Approved
JIT-5298	N••••• S•••••	HSM partition · goAML signing	Operator	30 min	Quarterly key check	Approved
JIT-5296	C••••• · vendor support	Kubernetes · production	Administrator	8 hours	Upgrade support	Denied

Standing admin rights

all privilege is time-boxed

Sessions recorded

100%

keystrokes and screen

Average grant

52 min

90th percentile 3 h

Break-glass used · 90 d

reviewed by audit