home/glossary/Principle of least privilege

Principle of least privilege

nounverified· unreviewed·updated Aug 30, 2026

The security objective of granting users only the access needed to perform official duties.

MWEFederal Financial Institutions Examination Council (FFIEC) IT Examination Handbook Infobase, Glossary

Senses

NIST SP 800-171r3attested usage pack match

No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.

Classifications

Entity Type

Requirement0%rule-basedmulti_axis_classifier_low_confidence.v1
?unassignedlast reviewed —

Sensitivity

—85%llm-generatedllm:claude-haiku-4-5
?unassignedlast reviewed —

Information Class

—90%llm-generatedllm:claude-haiku-4-5
?unassignedlast reviewed —

Variants

plural
Principle of least privileges
possessive
Principle of least privilege's
pluralpossessive
Principle of least privileges'