Principle of Least Privilege

A security principle that grants each user, process, or system only the minimum permissions necessary for its function. Least privilege reduces the attack surface and limits the impact of a compromise. Its rigorous application is essential for RLS policies, IAM roles, and API permissions.