Maria transfers from the finance department to the marketing department. Under the company's role-based access control (RBAC) system, IT assigns her the Marketing role but forgets to remove her Finance role. Two months later an audit finds she can still access sensitive accounting systems she no longer needs. Which access control principle was most directly violated by leaving her old role in place?