Privileged activity manager

1. A method, comprising:

receiving, from a user, a first selection of a first activity to be performed;

adding first just-in-time privileges using discrete modular steps to an account based on the first activity to be performed during a session, wherein the adding is performed dynamically on the account when the user selects the first activity;

logging the account into the session with the first added just-in-time privileges;

removing the first just-in-time privileges using discrete modular steps from the account after the first activity is performed, wherein the first just-in-time privileges are self-contained for the first activity and do not impact actions to add privileges for a second activity;

receiving, from the user during the same session, a second selection of the second activity to be performed, wherein the first activity is different from the second activity;

adding second just-in-time privileges using discrete modular steps based on the second activity to be performed, wherein the adding second just-in-time privileges is performed dynamically when the user selects the second activity; and

removing the second just-in-time privileges using discrete modular steps after the second activity is performed, wherein the second just-in-time privileges are self-contained for the second activity and do not impact actions to add privileges for the first activity.

2. The method of claim 1 , further comprising providing the user with a list of activities to be performed during the session.

3. The method of claim 1 , wherein the first or second just-in-time privileges enable the user to perform the first or second activity during the session.

4. The method of claim 1 , further comprising:

receiving a selection of a system on which to perform the first or second activity during the session; and

adding the first or second just-in-time privileges to the account using discrete modular steps based further on the selected system.

5. The method of claim 1 , further comprising removing privileges from accounts that are not in use using discrete modular steps.

6. The method of claim 1 , further comprising using a managed password for the account to log into the session in response to receiving a request to perform the first activity during the session.

7. A computing device, comprising:

a processor;

a memory in electronic communication with the processor;

instructions stored in the memory, the instructions being executable to:

receive, from a user, a first selection of a first activity to be performed;

add first just-in-time privileges to an account using discrete modular steps based on the first activity to be performed during a session, wherein the adding is performed dynamically on the account when the user selects the first activity;

log the account into the session with the first added just-in-time privileges;

remove the first just-in-time privileges from the account using discrete modular steps after the first activity is performed, wherein the first just-in-time privileges are self-contained for the first activity and do not impact actions to add privileges for a second activity;

receive, from the user during the same session, a second selection of the second activity to be performed, wherein the first activity is different from the second activity;

add second just-in-time privileges using discrete modular steps based on the second activity to be performed, wherein the adding second just-in-time privileges is performed dynamically when the user selects the second activity; and

remove the second just-in-time privileges using discrete modular steps after the second activity is performed, wherein the second just-in-time privileges are self-contained for the second activity and do not impact actions to add privileges for the first activity.

8. The computing device of claim 7 , further comprising instructions to automatically launch and control applications to be performed during the session.

9. The computing device of claim 7 , wherein the first or second just-in-time privileges enable the user to perform the first or second activity during the session.

10. The computing device of claim 7 , further comprising instructions to:

receive a selection of a system on which to perform the first or second activity during the session; and

add the first or second just-in-time privileges to the account using discrete modular steps based further on the selected system.

11. The computing device of claim 7 , further comprising instructions to remove privileges from accounts that are not in use using discrete modular steps.

12. The computing device of claim 7 , further comprising instructions to use a managed password for the account to log into the session in response to receiving a request to perform the first activity during the session.

13. A non-transitory, tangible computer-readable medium, comprising executable instructions for:

receiving, from a user, a first selection of a first activity to be performed;

adding first just-in-time privileges to an account using discrete modular steps based on the first activity to be performed during a session, wherein the adding is performed dynamically on the account when the user selects the first activity;

logging the account into the session with the first added just-in-time privileges;

removing the first just-in-time privileges from the account using discrete modular steps after the first activity is performed, wherein the first just-in-time privileges are self-contained for the first requested activity and do not impact actions to add privileges for a second activity;

receiving, from the user during the same session, a second selection of the second activity to be performed, wherein the first activity is different from the second activity;

adding second just-in-time privileges using discrete modular steps based on the second activity to be performed, wherein the adding second just-in-time privileges is performed dynamically when the user selects the second activity; and

removing the second just-in-time privileges using discrete modular steps after the second activity is performed, wherein the second just-in-time privileges are self-contained for the second activity and do not impact actions to add privileges for the first activity.

14. The computer-readable medium of claim 13 , further comprising executable instructions for providing the user with a list of activities to be performed during the session.

15. The computer-readable medium of claim 13 , wherein the first or second just-in-time privileges enable the user to perform the first or second activity during the session.

16. The computer-readable medium of claim 13 , further comprising executable instructions for:

receiving a selection of a system on which to perform the first or second activity during the session; and

adding the first or second just-in-time privileges to the account using discrete modular steps based further on the selected system.

17. The computer-readable medium of claim 13 , further comprising executable instructions for removing privileges from accounts that are not in use using discrete modular steps.

18. The computer-readable medium of claim 13 , further comprising executable instructions for using a managed password for the account to log into the session in response to receiving a request to perform the first activity during the session.

19. The computing device of claim 7 , wherein the instructions are further executable to remove a kerberos ticket.