Fire-department IT admins hold standing domain privileges for tasks they perform only a few times a year. Which authorization design reduces that risk?
Select an answer to reveal the explanation.
Short Explanation
Year-round admin rights for a once-a-year job is leaving the fire axe on the coffee table. Use just-in-time elevation—approve, use, expire. More standing power, no break-glass plan, or one shared god login make the problem louder, not quieter.
Full Explanation
Just-in-Time access grants privileged authorization only when needed and for a limited duration, shrinking the window of credential theft and misuse. Standing admin rights for rare tasks violate least privilege and increase blast radius. Eliminating all privileged paths without a controlled alternative harms operations, while shared always-on admin accounts destroy accountability. JIT pairs with approval workflows and automatic revocation for municipal privileged operations.