JIT access grants elevated privileges only when needed, for a limited time, with full audit logging — eliminating standing privileged access that's a constant attack target.
Zero Standing Privilege (ZSP) = never have permanent admin access. JIT is the implementation: request → approve → grant → auto-revoke. Dramatically reduces the blast radius of compromised privileged accounts.