Zero Standing Privilege (ZSP) is a privileged access model where users, administrators, and service operators do not keep permanent admin rights. Instead, they request access only when needed, and the system grants it temporarily after approval or policy checks. When the task ends, the elevated access expires automatically.
ZSP matters because standing privileges are a common attack path. If an account always has admin rights, stolen credentials, phishing, or token theft can give an attacker immediate high-impact access. By removing permanent privilege, defenders reduce the number of accounts that can be abused and limit how long an attacker can operate if access is misused. In practice, ZSP is often implemented with just-in-time elevation, role-based approvals, session logging, and tight integration with identity systems. It is especially useful for human admins, third-party vendors, and engineers who need occasional elevation but not constant control.