Just-in-Time (JIT) Access and Team Setup

Just-in-Time (JIT) access and team setup

Just-in-Time (JIT) access in Petra lets you control who can see and work with which tenants, and can be part of how you set up your team so that analysts or support staff only get access when they need it, or only to the tenants they're responsible for.

What JIT access means

In a JIT model, access to a tenant (or set of tenants) is granted when it's needed, rather than giving everyone in your organization access to all tenants all the time. That's useful for MSPs and larger teams: you might want an analyst to work on a specific customer incident without giving them broad access to every customer's data. JIT setup in onboarding and in your organization's settings lets you define how access is scoped—for example, by assigning people to specific tenants or by using roles that limit what they can see and do.

How it fits into team setup

When you're setting up your team in Petra, you'll invite members and assign them roles. Some members may be full members who can see and manage all tenants in the organization; others may be partial members or have access only to certain tenants. JIT and tenant-scoped access work with these roles so that when someone needs to investigate an incident or run a report, they only see the tenants they're allowed to access. That keeps access aligned with job duties and reduces the risk of someone accidentally viewing or changing the wrong customer's data.

Configuring JIT during onboarding

If your organization uses JIT, you may see options during onboarding or in settings to configure how access is granted—for example, which tenants a new member can access or whether certain actions require additional approval. The goal is to make sure that the right people can do their jobs (triage incidents, run reports, take remediation actions) without having unnecessary access to tenants they don't support. If you're not sure how JIT is set up for your org, check your organization or access settings, or ask your Petra administrator.