---
title: "How to Configure and Manage EPM Just-in-Time (JIT) Access"
slug: "how-to-configure-and-manage-epm-just-in-time-jit-access"
updated: 2026-03-04T12:03:46Z
published: 2026-03-04T14:36:49Z
canonical: "docs.senhasegura.io/how-to-configure-and-manage-epm-just-in-time-jit-access"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.senhasegura.io/llms.txt
> Use this file to discover all available pages before exploring further.

# How to Configure and Manage EPM Just-in-Time (JIT) Access

**Just-in-Time (JIT)** access allows users to elevate privileges as system administrators. So when JIT is active, the user will appear in the Administrators group.

          Attention

          

The product operates with Just-in-Time (JIT) access taking precedence over any denylist configuration. This means that even if a user or application is on the denylist, enabling JIT will grant elevation or access as expected.

## **Configure JIT access**

1. Access the Segura® platform.
2. Go to the menu **EPM ➔ Settings ➔ Parameters ➔ EPM Windows**.
3. In the **JIT/Elevation methods** section, check **Enable JIT access?** as **Yes**.
4. Set **Block elevation of privilege** to **No**.

---

## **Enable JIT access**

1. Access the workstation desktop of the user.
2. Start Core.
3. Enable JIT by clicking the **Just-In-Time** button.

          Info

          

Configure the application to record to visualize what happened during the JIT access. In Recording reports, the recording will be available. It may take 10 to 20 minutes after the end of the session to view the recording on the Segura® platform.

## **Disable JIT access**

1. Access the workstation desktop of the user.
2. Start Core.
3. Turn off JIT by clicking the **Just-In-Time** button.

---

## **Manage system administrators**

To confirm that the user has been added or removed from the **System Administrators** group, follow the steps:

1. Access the workstation desktop of the user.
2. Go to **Computer Management ➔ Local Group Users ➔ Groups ➔ Administrators.**
3. View if the user is part of the admin user group.