A security principle stating that users and systems should only have the minimum access necessary to perform their function.
Least privilege limits the blast radius of any single compromised account — a foundational concept that shows up across network security, cloud security, and identity management.
