Access that arrives for the window it was asked for.
The role arrives for the four hours it was asked for, and it leaves on its own.
Govern, just-in-time access
The admin role was granted for one incident in April. It is October, nobody has used it since, and nobody has taken it away.
How it works
A license, an application, a directory role or an application role are all requested the same way
Policy on the resource decides who approves: the resource owner, the line manager, or both of them
Nothing submits without a justification and an end time, and the ticket travels with the request
The schedule that created the grant removes it, with no reminder for anyone to action
The jobs it is bought for.
No standing accessAdmin that arrives for four hours and leaves on its own