home/glossary/Principle of least privilege

Principle of least privilege

nounverified· unreviewed·updated Aug 30, 2026

The security objective of granting users only the access needed to perform official duties.

MWEFederal Financial Institutions Examination Council (FFIEC) IT Examination Handbook Infobase, Glossary

Senses

NIST SP 800-171r3attested usage pack match

No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.

Classifications

Entity Type

Requirement0%rule-basedmulti_axis_classifier_low_confidence.v1
?unassignedlast reviewed

Sensitivity

85%llm-generatedllm:claude-haiku-4-5
?unassignedlast reviewed

Information Class

90%llm-generatedllm:claude-haiku-4-5
?unassignedlast reviewed

Variants

plural
Principle of least privileges
possessive
Principle of least privilege's
pluralpossessive
Principle of least privileges'