Abstract: A system and method is described that reduces a likelihood that a privileged account at a system (e.g., device, network, and/or application) for a user is compromised. For example, the privileged account for the user at the system is disabled in response to being created. The user can provide a request for at least one elevated right at the system corresponding to a request to use the privileged account at the system. An identity of the user is authenticated in response to receiving the request to confirm that the user is requesting the privileged account at the system. The privileged account for the user is enabled at the system to allow the user to perform at least one action that the user was not previously allowed to perform.

Abstract: In an example method, a system obtains a data record indicating an anticipated change in an employment status of a user at an organization, including a data field indicating an effective time of the anticipated change. At a first time prior to the effective time, the system modifies an access privilege of the user with respect to computer resources of the organization, including (i) allowing the user to perform first operations using the computer resources between the first time and a second time subsequent to the first time, and (ii) preventing the user from performing second operations using the computer resources starting at the first time. At the second time, the system further modifies the access privilege of the user, including preventing the user from performing the operations using the computer resources starting at the second time.