loading
loading
Giving code, users, and keys only the permissions they actually need.
Least privilege limits damage when something fails or leaks. A read-only key cannot delete data, and a scoped agent cannot touch unrelated systems.
Plainly
Think of Least Privilege as the lock and rules that keep people and data safe. Giving code, users, and keys only the permissions they actually need.
In practice
Use it when a workflow touches secrets, permissions, user data, payments, or untrusted input. In practice, define the owner, input, output, and failure mode before you rely on it.