Access requests, JIT and break-glass

Ciyora Fortress grants access in three ways. All three end in the audit chain.

Access requests

People request access from a catalogue in the employee portal. The request goes to its approvers in the approval centre, together with the result of a separation-of-duties (SoD) check. Approving a request that conflicts with SoD policy needs a written reason. Approvers can decide one request at a time or in bulk.

Just-in-time access (JIT)

Just-in-time access grants a privileged role for a limited time instead of permanently. A JIT policy decides whether approval is needed and whether MFA is required to activate. Active JIT sessions are listed while they run and can be extended or revoked with a reason. Standing privilege that could be JIT is reported as a finding.

Break-glass

Break-glass access releases emergency credentials when normal privileged access fails. It needs a set number of different approvers; the requester cannot approve their own request and each approver counts once. Only the requester can activate an approved request, and every break-glass session is recorded.

Privileged credentials and sessions

Privileged credentials live in the credential vault. Checking one out injects it into the session; revealing it needs a reason and can require a hardware security key. Privileged sessions over SSH are recorded for replay, and RDP and VNC recordings can be downloaded.

Access reviews

Access reviews (certification campaigns) ask managers or application owners to confirm or revoke access on a schedule. Each campaign produces an evidence pack.