A financial services company is redesigning access controls under a Zero Trust strategy. Their security architect wants to ensure that when users are granted access, they receive only the minimum permissions required to complete their current task, and that broad standing administrative access is eliminated in favor of time-limited, task-specific access. Which Zero Trust guiding principle does this approach directly implement?