Skip to content

[Feature Request]: Configurable timeframe limit for JIT admins #3951

@inventitinkoop

Description

@inventitinkoop

Please confirm:

  • I have searched existing feature requests (open and closed) and found no duplicates.
  • **me or my organization is currently an active sponsor of the product at the $99,- level.

Problem Statement

The problem is that users create JIT admins with unlimited expiry time. So they can always use it in the future (it's the easy way, but it's not secure).

Benefits for MSPs

This mitigates security leaks because of the maximum numbers of global admins and increases secure score. This also gives more granular control.

Value or Importance

This is almost critical, regarding the fact that the function is now being abused.

PowerShell Commands (Optional)

No response

Metadata

Metadata

Assignees

No one assigned

    Projects

    Status

    Done

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions