JIT can have various definitions, and the functionality in PASM does support JIT via the request/approval process.  However, Entitle expands on that both via UI/UX as well as cross-cloud/on-prem.  It would be good to review your current use cases and see which ones match up to your needs.