{"version":"0.2.0","built_at":"2026-10-10T20:58:14.188Z","license":"CC BY 4.0 © Mike Reams","canonical":"https://catalog.mikereams.com","capability":{"id":"BC-760.20.40","name":"Privileged Access Management","level":3,"parent_id":"BC-760.20","l1_id":"BC-760","industry":"cross-industry","macro_id":"MC-70","path":["Cybersecurity","Identity & Access Management","Privileged Access Management"],"description":"Vault, broker and record administrative access so it is granted just in time, used under observation and withdrawn when done.","aliases":[],"in_scope":[],"out_of_scope":[],"csdm_note":null,"status":"active","successor_id":null,"child_ids":[]},"crosswalk":{"realized_by":[{"product_id":"PR-190","product":"Okta","pc_id":"PC-190.60","pc":"Privileged Access","maturity":"emerging","via":null}],"used_in":[],"patterns":[{"id":"DP-350","name":"Secrets Management","category":"Security","via":null}],"stacks":[],"books":[]},"ancestors":[{"id":"BC-760","name":"Cybersecurity","level":1},{"id":"BC-760.20","name":"Identity & Access Management","level":2}],"children":[]}