least privilege

nouncandidate·updated May 12, 2026

GlossaryL1 — what DictionaryL2 — how used ThesaurusL3 — relations Universaleverything

The principle that a security architecture should be designed so that each entity is granted the minimum system resources and authorizations that the entity needs to perform its function.

Framework senses

9 senses across 8 frameworks

SANS Glossary of Security Terms1 senseview framework →

§1: Least Privilege is the principle of allowing users or applications the least amount of permissions necessary to perform their intended function.

NIST Cybersecurity Framework1 senseview framework →

§1: The principle that a security architecture should be designed so that each entity is granted the minimum system resources and authorizations that the entity needs to perform its function.

FFIEC Cybersecurity Assessment Tool, Baseline, May 20171 senseview framework →

§1: The principle that a security architecture should be designed so that each entity is granted the minimum system resources and authorizations that the entity needs to perform its function.

NISTIR 7298: Glossary of Key Information Security Terms, Revision 22 sensesview framework →

§1: The security objective of granting users only those accesses they need to perform their official duties.
§2 · sense_2_pending_review: The principle that a security architecture should be designed so that each entity is granted the minimum system resources and authorizations that the entity needs to perform its function.

CNSSI-4009 (Glossary of Information Assurance Terms)1 senseview framework →

§1: The principle that a security architecture should be designed so that each entity is granted the minimum system resources and authorizations that the entity needs to perform its function.

NIST SP 800-121 senseview framework →

§1: The security objective of granting users only those accesses they need to perform their official duties.

Information Technology Laboratory Computer Security Resource Center Glossary1 senseview framework →

§1: The principle that a security architecture should be designed so that each entity is granted the minimum system resources and authorizations that the entity needs to perform its function.

Sp 800-12. an introduction to computer security: The nist handbook.1 senseview framework →

§1: The security objective of granting users only those accesses they need to perform their official duties.