Just-enough access, a Zero Trust idea where every identity receives only the rights a given job requires; paired with just-in-time access, it puts least privilege into practice.
Also called just-enough-access.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains JEA in context, with comparison tables and the common traps.
Terms in this definition
- Zero Trust
Never assume any network is safe. This security model rests on three principles: assume breach, verify explicitly and grant least-privilege access.
- WHERE
Limits a SELECT, UPDATE or DELETE to just the rows meeting a condition. Omit it, and the statement hits every row.
- IDENTITY
A column property, written IDENTITY(seed, increment), that gives each new row the next number in a rising sequence. SCOPE_IDENTITY reports the latest value created in the current scope, and a rolled-back transaction still uses up the numbers it took.
- Job
A sequence of steps executed together on one agent or runner, or on the server for agentless work. While running, each occupies one of your parallel jobs.
- JIT
Approach where access is switched on only at the moment it is needed and expires after a set time; examples are PIM role activation and JIT VM access, which opens ports 3389 or 22 temporarily.
- Least privilege
The security practice of giving each task only the permissions it requires, scoped as narrowly as possible.