Session-Specific JiT Privilege Selection via Drop-Down Menu

Session-Specific JiT Privilege Selection via Drop-Down Menu

1 vote

avatar

Starting with version 2026.2, it is possible to assign a "Default JiT privilege" to a PAM account.

We would like to request an enhancement to configure this privilege on a per-session basis. Specifically, we need a drop-down menu within the session configuration that displays and lets users select from the available privileges assigned to the inherited user.


This scenario is necessary when multiple sessions are linked to the same account, but each individual session requires a different "Default JiT privilege".

Best regards,
Christian

f4936cec-cbe8-4aca-b398-260ef472b7b0.png

All Comments (1)

avatar

Hi @Christian Egli,

This is currently possible only if the session is linked directly to the PAM account but is not currently supported when using inherited credentials.


We'll take a look to support it with Inherited PAM credentials as well.

Cheers,

Luc Fauvel

b25ed56b-e8b0-426c-899c-9a97f3cda814.png

Sysadminotaur pondering a question Special Q&A

Our CTO is answering your AI questions

A rare opportunity — ask our CTO directly.

10 questions already asked Closed
View questions →