Just-in-time (JIT) Settings

Activate JIT settings for application access and admin access.

• Application access: Provides access to specific applications as defined in policy.
• Admin access: Provides admin access for a defined period of time for standard users to accomplish specific tasks.

JIT application access settings

You must activate the Just-in-time (JIT) feature to use EPM's JIT access management system.

To use JIT application access, you require an API account with access to the JIT API. See API settings.

To activate the user request system:

1. From the top left of the page, click > Endpoint Privilege Management for Windows and Mac > Configuration.
   The Configuration page displays.
2. Select Just-in-time (JIT) Access Settings.
3. Select Application Access.
4. Select the toggle, JIT Application Access Integration.
5. From the list, select the integration type, EPM or ServiceNow.
   • For ServiceNow, see Configure the ServiceNow integration in EPM.
   • For EPM:
     • Check the box to require notes to support the user's approval or denial decision.
     • Check the box to share the notes with the end users.
6. Select Save Changes.

JIT admin access settings

You must activate the JIT admin access before you can use the admin access on a workstyle.

To activate the admin access:

1. From the top left of the page, click > Endpoint Privilege Management for Windows and Mac > Configuration.
   The Configuration page displays.
2. Select Just-in-time (JIT) Access Settings, and then Admin Access.
3. To turn on the integration, select JIT Admin Access Integration.
4. If required, select the check box if users must enter a reason for the admin access.
5. Check the box to share the notes with the end user.
6. Select Save Changes.