Privileged & Emergency Access
No administrator holds standing unrestricted access. Elevated capability is granted just-in-time: time-limited, tenant-scoped, reason and ticket bound, approved (except audited break-glass), step-up verified, auto-expiring, and independently alerted. Support impersonation is always visible — the acting identity, tenant scope, reason and duration are shown and recorded. Break-glass holders can never erase their own audit evidence.
Request just-in-time elevation
Every field is mandatory. All-tenant financial access is refused by policy; duration is capped per profile.
Grants
Requested, active and historical privileged grants. Approve (a different admin), activate with step-up, or revoke early.
No privileged grants yet.
Independent security alerts
Break-glass and elevation events raise alerts on a separate channel for independent review — the acting admin cannot suppress them.
No alerts.