Least privilege

Granting only the tools, records, fields, actions, and duration necessary for the task.

Editorial owner
VMCSoft Digital
Last reviewed
2026-07-28
Review by
2027-01-28
Editorial content risk
lowPublishing review classification—not your task assessment.

Definition

Granting only the tools, records, fields, actions, and duration necessary for the task.

Practical test

Can any tool, record, field, operation, credential scope, or access duration be removed without preventing the bounded task?

Example

A CRM updater may edit two fields in one queue for one run; organization-wide delete permission violates least privilege.

What to record

For least privilege to be operational rather than a reassuring label, record the allowed identity, systems, records, fields, operations, duration, and denied capabilities. If those facts cannot be observed or tested, do not treat the term itself as evidence that the workflow is safe.