// definition
Least privilege
Access rights limited to the needs of a task
Short definition
A security principle limiting authorized access to what a person or process needs for its assigned tasks. It applies to data, functions and service accounts, including during system development and operation. Its effectiveness depends on the permissions actually enforced and reviewed. Separation of duties complements this principle by assigning certain functions to different roles.
risk atlas
Knowledge map
Related analyses
Primary sources
- NIST, SP 800-53, revision 5NIST SP 800-53, revision 5: AC-6 defines least privilege; AC-5 separately addresses separation of duties.