least privilege
nounverified·updated Aug 28, 2026
The principle that a security architecture is designed so that each entity is granted the minimum system authorizations and resources needed to perform its function.
MWENIST SP 800-171r3
Senses
SANS Glossary of Security Terms
Least Privilege is the principle of allowing users or applications the least amount of permissions necessary to perform their intended function.
NIST Cybersecurity Framework
The principle that a security architecture should be designed so that each entity is granted the minimum system resources and authorizations that the entity needs to perform its function.
NISTIR 7298: Glossary of Key Information Security Terms, Revision 2
The security objective of granting users only those accesses they need to perform their official duties.
Classifications
Entity Type
Control100%manual reviewaxis_review_queue.v1
?unassignedlast reviewed —
Sensitivity
—85%llm-generatedllm:claude-haiku-4-5
?unassignedlast reviewed —
Information Class
—90%llm-generatedllm:claude-haiku-4-5
?unassignedlast reviewed —
Variants
- synonym
- sufficient access
- alternatephrasing
- Least Privilege
- plural
- least privileges
- possessive
- least privilege's
- pluralpossessive
- least privileges'