CyberGuard dictionary / Identity & Access
Least Privilege
Giving an identity only the access needed for its assigned task.
In simple terms
People and programs should receive the minimum access necessary to do their work.
Technical explanation
Least privilege limits permissions by role, resource, operation, and time, reducing the impact of mistakes and compromised accounts.
Grant only the operations and resources needed for a task, and remove access when the task or role ends. Temporary elevation and periodic reviews limit the reach of compromised identities.
Examples in practice
A support employee can reset customer passwords but cannot export all payment records.
The support worker receives time-limited access to one customer's case, not a permanent export permission for all accounts. The access expires automatically after the case closes.
Why it matters
Narrow permissions reduce how much damage one compromised account can cause.
VERIFY & LEARN MORE
Sources and further reading
Published 2026-10-15 · Last updated 2026-10-15 · CyberGuard editorial content. Source links provide context; they do not imply endorsement.