Just-in-Time Access (JIT)

What it is

Just-in-time access gives a person or service elevated permissions for a limited window and a specific purpose, such as reading one customer's production data during a ticket, then revokes them automatically. It replaces standing admin access.

Why it matters

Technical supportTechnical SupportSupport for products where answers depend on code, config, and system behavior. needs production context to diagnose issues, but broad standing access is a security and compliance risk. JIT lets teams investigate without leaving permanent doors open.

Best practices

1. Tie access to a ticket – Every grant should reference the issue that justified it.
2. Expire automatically – Hours, not weeks, and no manual cleanup.
3. Log everything – Record what was viewed during the window for audits.

How Decimal helps

Decimal investigates with read-only access by default, scoped to the systems you connect, so support gets production context without anyone holding broad standing permissions.