Controls, typically vaulting, brokered access, session recording, and just-in-time elevation, applied to administrative accounts.