Concept - Least Privilege

Definition (s.8): access control should be implemented so that each system entity is granted the minimum system resources and authorizations needed to do its work. The principle tends to limit damage caused by an accident, error or unauthorized act.

• One of the access control requirements, with reliable input and fine/coarse-grained specification (s.8).
• (Added context) In your Chapter 1 class notes it is also a fundamental security design principle: “every user (process) should have the least privilege to perform a task”.
• (Added context) Quiz wording: “users should have only the minimum permissions needed to perform their tasks” = least privilege (Quiz A part (o), see Past Exam - Question Bank & Style Guide).

Related: Concept - Open and Closed Policies, Concept - Access Control. Appears in 04 Access Control - Chunk 01 (s.1-28).