thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Foundational

Least Privilege

Principle of granting users and processes only the minimum access rights needed to perform their tasks.

Definition

Least privilege limits the damage an account, application, or attacker can cause if compromised. It applies to user permissions, service accounts, application processes, and administrative rights, and should be reviewed regularly to avoid privilege creep. It is closely related to need to know and just-in-time access.

Example

A help desk technician can reset passwords but cannot modify domain administrator group membership.

Exam tip

Least privilege limits permissions (what you can do); need to know limits access to specific information.

Don't confuse it with

Related terms