access-grants

name	access-grants
description	Access grants for production systems.

Grant Access

Issues time-bound production access and records why it was needed.

Requesting

Every grant needs a ticket, an expiry, and a named approver from the owning team. The approver list comes from the service catalog.

Reviewing

Every quarter, reconcile active grants against tickets. Anything without a live ticket is revoked the same day. The reconciliation query is in the access review notes, and the escalation path in the escalation guide.