Back to Glossary

Security principle

Principle of Least Privilege (PoLP)

Giving each user, system or process only the permissions necessary for its assigned tasks.

Related domain: CybersecurityConcept ID: concept-least-privilege

Definition

The Principle of Least Privilege (PoLP) states that each user, system or process should have only the permissions necessary to perform its assigned tasks.

Human Explanation

No person or system should have more access than it genuinely needs.

Why it Matters

Limiting permissions reduces the consequences of errors, account compromise and unauthorised actions.

Conceptual Boundary

PoLP does not mean preventing people from doing their work. It means providing the access required while limiting unnecessary exposure.

Practical Perspective

Regular permission review is as important as assigning permissions correctly in the first place.

Related Concepts