Least Privilege

The principle of least privilege grants users only the minimum permissions necessary to perform their job functions, reducing security risk.

Least privilege is a fundamental security principle—users and systems should have only the minimum access required for their function.

Implementation approaches: - Role-Based Access Control (RBAC): Permissions tied to roles - Attribute-Based Access Control (ABAC): Dynamic policies - Just-In-Time Access: Temporary elevation when needed - Zero Standing Privileges: No persistent admin access

Benefits: - Limits blast radius of compromised accounts - Reduces insider threat risk - Simplifies access audits - Supports compliance requirements

Common violations: - Shared admin accounts - Excessive permissions "just in case" - Permissions not revoked when roles change - Service accounts with too much access

Why It Matters

Overprivileged accounts are the primary enabler of lateral movement in breaches. When a single compromised account has broad access, attackers can reach sensitive data without needing additional exploits. Least privilege limits the blast radius of any compromise and is a core requirement across all major compliance frameworks. Regular access reviews to enforce least privilege are among the most commonly tested controls in SOC 2 audits.

Key Points

Core principle of zero trust

Reduces attack surface and blast radius

Requires regular access reviews

Must include service accounts and APIs

Combine with JIT for privileged access

Applicable Compliance Frameworks

SOC 2 ISO 27001 HIPAA PCI DSS NIST CSF

Related Terms

Access Control

Access control is a security mechanism that regulates who can view or use resources in a computing environment, ensuring only authorized users can access systems and data.

Zero Trust

Zero Trust is a security model that requires strict identity verification for every person and device, regardless of network location.

Just-In-Time Access (JIT)

JIT access is a security practice that grants privileged access only when needed, for a limited duration, with automatic expiration to minimize standing privileges.