Alert icon Keyboard navigation enabled.
Alert icon TAB or Shift+TAB to navigate across. Down ↓ to open menu. ESC to close menu.
Alert icon Down ↓ to select section. Right → to activate. Up ↑ / Down ↓ / Tab to traverse all. ESC to exit.
BeyondTrust
Skip to content Use space or enter to skip.

What can we help you find today?

Instant Results
  • Website Results
  • Technical Documentation

Filter Options

Focus your search

Filtering by

Your recent searches:

Contact Us Chat with Sales Get Support
  • English
  • Deutsch
  • français
  • español
  • 한국어
  • português
  • Home
  • Resources
  • Starburst’s Journey to Zero Production Admins with Entitle current page
Link copied

Starburst’s Journey to Zero Production Admins with Entitle

Starburst Customer Story Resource Card Smaller Text
Starburst’s Journey to Zero Production Admins with Entitle

Get Instant Access to this Content

Learn more about how to secure your business from threats in places you didn't even know existed.

Introduction

White chain icon to symbolize the ability to copy a link
Link copied
Check mark to visually show text has been copied

Starburst, a pioneering software company based in Boston, offers a cutting-edge data lakehouse platform, integrating the best features of data lakes, data warehouses, and data virtualization. Their journey with Entitle showcases a transformative approach to managing cloud access.

The Challenge

White chain icon to symbolize the ability to copy a link
Link copied
Check mark to visually show text has been copied

Enable access to production as needed, without slowing down operations.

Traditionally, a subset of Starburst's production engineers had elevated roles within their AWS accounts which posed security risks and inefficiencies. The need was clear: to facilitate access to production environments only when necessary, without hindering operational speed.

The Solution

White chain icon to symbolize the ability to copy a link
Link copied
Check mark to visually show text has been copied

Adopting a read-only baseline, with engineers requesting access to make changes in prod.

Starburst adopted a radical shift to a read-only baseline model. Engineers requesting permissions to make changes in the production environment would go through Entitle. Crucially, for on-call engineers, automatic provisioning was set up, recognizing the urgency and unpredictable nature of incident handling.

Access to prod at Starburst

The Impact

White chain icon to symbolize the ability to copy a link
Link copied
Check mark to visually show text has been copied

No engineers have baseline admin access in production.

The implementation of Entitle led to a groundbreaking outcome: zero engineers with baseline admin access in production. Starburst successfully transitioned from perpetual access to a just-in-time (JIT) model, enhancing security without compromising efficiency.

Key outcomes:

  • Automated on-call escalation for incident handling
  • Zero standing admin privileges in production
  • Significant reduction in manual work

Starburst's ROI with Entitle

White chain icon to symbolize the ability to copy a link
Link copied
Check mark to visually show text has been copied
Just in Time (JIT) Access to AWS
Enabled just in time access to AWS for enhanced cloud security, reduced risk, and streamlined operations within their AWS environment.
Quick time to value
Entitle's intuitive setup and operation allowed Starburst to quickly see the benefits.
Attribute-based approvals
Leveraging job functions and group memberships for auto-approval.
Reduced manual workload
Automatic provisioning and de-provisioning of access rights significantly cut down manual efforts.
Simplifying zero trust
Automating production network access through Cloudflare.
Enhanced Okta group management
Entitle made it easier for users to request and obtain access to specific tools via self-serve group changes.

"We initially considered building an in-house solution, but Entitle's affordability, ease of use, and comprehensive feature set made it the obvious choice. It not only saved us on additional staffing but also seamlessly integrated into our existing systems."

Starburst logo

—Shane Dizer, Security Engineering Manager, Starburst

Conclusion

White chain icon to symbolize the ability to copy a link
Link copied
Check mark to visually show text has been copied

Entitle not only provided a robust solution for Starburst's unique challenges but also propelled them towards a more secure, efficient, and manageable cloud environment. This case study exemplifies how innovation in access management can fundamentally change how companies operate in the cloud.

Latest
  • Identity Security Risk Assessment
    Jun 29, 2026 Identity Security Risk Assessment
    Research
    1m
  • Who Has the Keys? A Privileged Access Security Assessment
    Jun 25, 2026 Who Has the Keys? A Privileged Access Security Assessment
    Research
    1m
Related
  • AWS Cloud Migration Case Study: Premier Bankcard
    Oct 28, 2024 AWS Cloud Migration Case Study: Premier Bankcard
    Research
    1m
  • Identity Security Insights Connectors
    Oct 16, 2024 Identity Security Insights Connectors
    Research
    1m
Share this Article
  • Link
Relevant Tags
  • Admin Access Restrictions
  • Advanced Access Control
  • Automated Escalation
  • Automated Incident Handling
  • Automatic Provisioning
  • Cloud Environment Management
  • Ease of Use
  • Efficiency Improvement
  • Enhanced Security
  • Entitle

Keep up with BeyondTrust

Customer Support Get Started
  • LinkedIn
  • X
  • Facebook
  • Instagram
  • Add BeyondTrust as a preferred source on Google
  • Privacy
  • Security
  • Manage Cookies
  • Do Not Sell My Data
  • WEEE Compliance

Copyright © 2003 — 2026 BeyondTrust Corporation. All rights reserved. Other trademarks identified on this page are owned by their respective owners. BeyondTrust Corporation is not a chartered bank or trust company, or depository institution. It is not authorized to accept deposits or trust accounts and is not licensed or regulated by any state or federal banking authority.

Prefers reduced motion setting detected. Animations will now be reduced as a result.