What is the purpose of just-in-time privileges in access control?

• A. Grant temporary, time-bound access only when needed to perform a task
• B. Grant permanent access to all resources
• C. Require daily password changes for all users
• D. Eliminate need for access controls

Answer: (A)

Just-in-time privileges are about giving access only for the moment it’s needed and for a defined period. This aligns with the practice of least privilege by avoiding standing, always-on access that can be misused or forgotten. When a task requires access, a temporary authorization is issued for a specified time window and, once the work is done, the access is revoked automatically. This approach sharpens security by reducing the window during which credentials can be abused and by making each access event easier to audit. For example, a technician might get elevated rights for a limited duration to perform a patch, and after that window closes, those rights disappear. In contrast, permanent access, constant password changes for everyone, or removing all access controls would undermine security.