Concept 14
Least Privilege
Giving users only the minimum access needed to do their job.
Least privilege means users should only have the minimum access needed to do their job.
They should not receive extra permissions.
This reduces:
- Accidental mistakes
- Insider threats
- Damage from hacked accounts