SecurityBrief Canada - Technology news for CISOs & cybersecurity decision-makers
Canada
BeyondTrust adds just-in-time access to ServiceNow

BeyondTrust adds just-in-time access to ServiceNow

Tue, 20th Oct 2026 (Today)
Joseph Gabriel Lagonsin
JOSEPH GABRIEL LAGONSIN News Editor

BeyondTrust has launched an integration between its Entitle product and ServiceNow, adding just-in-time privileged access controls to ServiceNow workflows.

According to the companies, the integration lets organisations manage privileged access requests, approvals and governance within existing ServiceNow processes. It also applies BeyondTrust Entitle controls to access within ServiceNow itself, including groups, roles and certain protected resources.

The product is intended to address standing privileges, where elevated access remains available even when it is not actively needed. BeyondTrust argues this can increase security exposure, while removing permanent access without an alternative can create operational problems for teams that need rapid entry to production systems.

Under the new arrangement, ServiceNow can serve as the front end for access requests. Employees can use existing self-service portals built on ServiceNow to request just-in-time access across cloud infrastructure, software services and applications, while organisations keep their existing approval workflows in place.

The integration also lets ServiceNow act as a source of on-call information for privileged access. In practice, on-call schedules held in ServiceNow can be used to determine when sensitive production access should be pre-provisioned or quickly approved.

The announcement expands an existing relationship between the two companies. BeyondTrust says it already integrates its wider portfolio with ServiceNow. The release also sits alongside other Entitle updates, including dashboard changes, attribute-based access control for just-in-time access and risk-based just-in-time access.

Access controls

One of the more significant changes for customers is that the integration extends BeyondTrust's zero standing privilege model into ServiceNow itself. Organisations can apply temporary, more granular access controls not only to systems managed through ServiceNow workflows, but also to the platform's own roles and application-specific permissions.

The aim is to reduce persistent privileged access without delaying operational teams. Security teams have increasingly tried to replace long-lived administrator rights with time-limited access, though such approaches can face resistance if they add steps to routine support work or incident response.

Ran Ne'man, Vice President of Products at BeyondTrust, said the product was designed to fit established working practices.

"Zero standing privilege has to work in the real world, where teams still need fast access to critical systems to keep the business moving," said Ran Ne'man, Vice President of Products at BeyondTrust. "Just-in-time access gives organisations a way to reduce persistent privilege without standing in the way of legitimate work. By bringing BeyondTrust Entitle and ServiceNow together, we're making it easier to build those controls into existing workflows and put least privilege into practice at enterprise scale."

ServiceNow presented the integration as a way to bring security controls into tools that staff already use. Combining access requests, approvals and removal in a single workflow could reduce the administrative burden for employees, approvers and security teams.

"Security is most effective when it fits the way people already work," said Alix Douglas, Group Vice President of Partner Solutions at ServiceNow. "Together, ServiceNow and BeyondTrust are helping organisations grant access at the moment it's needed and remove it when it isn't, all inside the workflows their teams already use. That means less friction for employees, approvers, and security teams, and tighter control over who can reach the systems that keep the business running."

The release comes as access governance and privileged access management remain a focus for corporate security teams. Elevated credentials are frequently targeted in cyber intrusions because they can give attackers broader reach across systems, applications and data once inside an organisation.

By linking temporary access decisions to business context such as approvals and on-call schedules, vendors are trying to make least-privilege policies easier to apply in day-to-day operations. The integration is now available through the ServiceNow Store.