A zero-standing privileges (ZSP) account in Devolutions PAM has no group membership or attached permissions. If compromised, an attacker will be unable to achieve further control. ZSP accounts significantly reduce exposure, as they maintain privileges for short durations.