home

Least privilege

Least privilege

(also the principle of least privilege, principle of minimal privilege, principle of least authority)

Least privilege definition

In computer science, least privilege means allowing minimal clearance to users, processes, applications, systems, and devices so that they only have access to information and resources that are necessary for their legitimate purpose.

Least privilege example

• In a company, an accountant’s user account with least privilege can only access financial documents, software, and databases. However, they do not have access to the company’s employee records or its security software.

Further reading

How do hackers abuse privilege escalation?