Least privilege
- Term
- Least privilege
- Exam
- CISA & CISM
- Definition
Granting only the access needed to perform a role.
- Explained
Least privilege grants each user, service or system only the access its task requires, and only for as long as needed. It limits the damage from mistakes, misuse and compromised accounts, and underpins role-based access and just-in-time privileged access.
- In practice
A help desk analyst can reset passwords but cannot change firewall rules.
- Often confused with
- Need to know
- Exam angle
Limits damage from compromised or misused accounts.
- Related