Definition
A security principle where users, services, or AI agents are never granted permanent access privileges. Instead, access is granted only at the moment it is needed, verified in real time, and revoked immediately after use. No credential is ever held for longer than necessary.
Why it matters
Standing privileges (passwords, API keys held indefinitely) are the default in most enterprises, but they become dangerous at scale when thousands of autonomous AI agents hold them. Zero standing privilege eliminates the possibility of long-term credential compromise.