Work out privileged account count instantly with clear inputs, formula shown and shareable results.
Privileged access management scoping fails when it counts only people. Service accounts, CI runners, automation identities and cloud roles frequently outnumber privileged humans several times over, and they are worse: their credentials are long-lived, embedded in configuration and rarely rotated. The machine-to-human ratio is the number that tells you where the real exposure sits.
Privileged population
human privileged = employees x privileged share; service privileged = service accounts x privileged share; ratio = service privileged / human privileged
They cannot use MFA in the usual sense, their secrets live in configuration or code, and rotating them risks breaking production, so they accumulate stale high-privilege credentials.
Just-in-time elevation for humans, and workload identity federation for machines so short-lived tokens replace static credentials entirely.