The principle of granting only the minimum permission needed, each time.
A principle of granting only the minimum permission necessary to carry out a task, limiting the blast radius if an account is compromised. Granted permissions tend to accumulate unchecked over time -- a problem known as permission creep -- so periodic access reviews to reclaim permissions that are no longer needed are an essential companion practice.
© 2026 ITBGM