Identity and Access Basics

Least Privilege for Support

Apply least privilege by separating standard access, elevation, scope, duration, approval, and revocation.

Beginner14 min read
Identity and Access Basics lessonIT support foundationsPractice

UNTIMED COACHING

Practice before the pressure

Use feedback to correct the model, not merely memorize an option position.

GUIDED PRACTICE

Practice the lesson questions

Answer normal lesson questions without a timer. Every answer includes an explanation, and incorrect answers can be tried again before continuing.

CONCEPT MODELS

See the lesson as a system

Use these visual guides to connect the key ideas before answering the questions.

Map the decisions in Least Privilege for SupportConnect standard access, elevation request, access scope, and access duration without collapsing their evidence.
Map the decisions in Least Privilege for SupportA support map connects four subject-specific decisions used in least privilege for support and shows the evidence produced by each decision.
Standard accessThe minimum missing access is named
Elevation requestOne approved administrative action is bounded
Access scopeEvidence for access scope
Access durationPrivileged access ends with the support task
Use Audit and revoke safelyConnect audit and revoke to its approved starting method, expected result, and safety boundary.
Use Audit and revoke safelyA practical support model connects audit and revoke with a method, result, and explicit safety boundary.
Audit and revokeFocus on audit and revoke
Starting checkReview access records and confirm removal
Expected resultThe privilege lifecycle is reviewable and closed
Safety boundaryShared accounts weaken accountability