← Security+ glossary

Least privilege

A principle by which a user or process is given only the minimum permissions necessary to perform their job. After a breach it limits the damage because a compromised account has few permissions, so the attacker cannot access resources outside that narrow scope.

All Security+ guides →