Privileged access
On This Lesson 4 topics
This lesson is planned. The outline below lists the topics it will cover. The full lesson has not been published yet.
In this lesson
control administrators and operators with the smallest powers for the shortest time.
Planned topics
- Privileged accounts are separate from daily accounts and never shared.
- Just-in-time access: elevated rights granted on request, approved, and expiring.
- Strong authentication and session recording for production and for secrets stores.
- Break-glass accounts for emergencies are sealed, monitored, and reviewed after use.
Draft outline details
Demonstration
a flow: engineer requests production access with a ticket, approver grants two hours, session logged, access expires, review next day.
Check your understanding
What is wrong with a shared admin account?
Show answer
Actions cannot be traced to a person, and removal of one person's access is impossible.
Practice
Apply this lesson with the module's lab, exercises and quiz.
Marking a lesson complete is optional and you can undo it any time. Your progress stays in this browser.