Fortune 500 Retail Giant Eliminates Standing Access Across Growing Cloud Footprint

• Manual granting and revoking processes: the full process could take up to 72 hours, significantly delaying onboarding and access requests.
• Static privilege elevation and de-elevation was the only option available through native OCI identity tooling.
• Large customization effort required to adapt existing identity governance and administration (IGA) tools to meet cloud needs.

The client’s Senior Director of Information Security, was on the hunt for a cloud-agnostic solution that would empower developers and data scientists with ephemeral, just-in-time (JIT) privileged access across the cloud infrastructure, applications, and data needed to do their work. The Infrastructure and DevOps team had previously implemented manual review, grant, and revoke processes, but these negatively impacted productivity and hindered the speed of development’s release cycle. 

The team considered options such as OCI’s native identity tooling and existing privileged access management (PAM) and IGA software in their environment. Ultimately, they found that these were inadequate because of the static nature of permissions granting and the effort required to customize existing tools to meet their required use cases. 

The team was looking for a solution that would automate manual processes and increase visibility into the privileges granted while enabling the Infrastructure DevOps team with access across the cloud to drive their projects forward. 

After a hands-on evaluation, the client team deployed Britive based on a role-based access control (RBAC) privilege framework to restrict access to the minimum levels required to perform their work in OCI. Doing so allowed the client to enforce the principle of least privilege and reduce the risk of data breaches or data leakage.