least privilege

{
  "id": "MLC-T-CYB-002450",
  "term": "least privilege",
  "field": "Cybersecurity",
  "definition": "1. A security principle that a system should restrict the access privileges of users (or processes acting on behalf of users) to the minimum necessary to accomplish assigned tasks.\n\n2. The principle that a security architecture is designed so that each entity is granted the minimum system resources and authorizations that the entity needs to perform its function.\n\n3. The principle that a security architecture is designed so that each entity is granted the minimum system authorizations and resources needed to perform its function.",
  "references": [
    "CNSSI 4009-2022; NIST SP 800-12 Rev. 1",
    "NIST SP 800-53 Rev. 5 from CNSSI 4009-2022",
    "NIST SP 800-171r3",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/least-privilege/"
}