Principle of Least Privilege

A security principle stating that subjects (users, processes, systems) should be granted the minimum set of access rights necessary to perform their legitimate duties, and no more.

A security principle holding that subjects (users, processes, services) should be granted the minimal set of access rights and permissions necessary to perform their legitimate tasks, preferably time‑bounded and narrowly scoped, to limit potential harm from misuse or compromise.