What is zero standing privilege?
In short:Zero standing privilege is the goal that no identity, human or agent, keeps permissions it is not using right now. Access exists only for the duration of a task. It reduces the blast radius of a stolen identity to almost nothing between tasks.
How does it work?
Permissions are granted just in time and removed automatically. Audits look for any grant that persists without activity.
What does it look like in practice?
Idira applies zero standing privilege to agents and manages token rotation on their behalf.