2 min lesson
The JIT flow, end to end
Explain the order in "The JIT flow, end to end", then say how you would verify the result.
Step 1 of 3
The JIT flow, end to endrequest → approve → time-box → revoke → audit
Just-in-time access means an engineer holds no production privilege by default and elevates only when there is a task and a reason. The grant is scoped, short and self-expiring. Walk the loop in order.
Interactive diagram. Step through it with the Next and Previous controls below, or Tab to a region to read its detail.
diagram: flow
Approval and audit are the gates; expiry is enforced at the identity layer, not by a background job.