Temporary elevation needs a clock
A
Practical lessons on auth, authorization, and access control.
Break-glass and "just this once" admin grants are where authorization quietly becomes permanent.
If someone needs elevated access to fix production, grant it with:
- A hard expiry (minutes or hours, not "until we remember").
- A reason recorded at grant time.
- An audit trail of what they did while elevated.
- Automatic revocation when the ticket closes or the window ends.
A standing Admin role for emergencies is not the same thing. Temporary elevation is a time-bounded exception; a permanent role is a new normal. Prefer short-lived elevation over expanding who holds powerful roles day to day.