Granting privileged access only when needed, for limited time periods. Reduces standing privileges and attack surface. Core component of modern PAM solutions.