Security principle granting users only the minimum access necessary to perform their job functions.
Least privilege is the security principle that users should have only the minimum access rights necessary to perform their job functions—no more, no less. Excessive privileges increase risk—compromised accounts cause more damage, insider threats have more opportunity, and accidental errors affect more systems. Implementing least privilege requires understanding what access people actually need and regularly reviewing that access remains appropriate. It applies to users, applications, and systems.
Why It Matters
The DSC Perspective:
Excessive access is excessive risk. Regularly review access rights and remove unnecessary privileges. When accounts are compromised, least privilege limits the damage attackers can do.