Dictionary · Cybersecurity Fundamentals
Least Privilege
Design · Beginner
The principle of giving each account, process, and device only the access required for its task, for only as long as that access is needed.
Everyday work should not happen with administrator rights. If an account is compromised, tight privilege limits how far the mistake or attack can spread.
Example: A backup account can read the file server but cannot change firewall rules. That is least privilege.
Common misconception
- It is not the same idea as having several layers of defense. This principle is specifically about how much access one identity receives.