Your organization is adopting a Zero Trust strategy. During a review, you notice that many employees have standing access to resources far beyond what their daily tasks require, and several service accounts hold broad permissions across multiple workloads. Which core Zero Trust principle should guide the remediation of these excessive permissions?