Least Privilege
Least privilege is a security principle that a system should restrict the access privileges of users, and of processes acting on behalf of users, to the minimum necessary to accomplish assigned tasks.
Updated
Overview
The principle applies to every entity in a system, not only people. A security architecture built on it grants each entity the minimum system resources and authorizations that the entity needs to perform its function. System and service accounts are managed under least privilege in the same way as user accounts.
Least privilege limits the damage from a compromised account, because an account with excessive privileges can do more damage than one whose privileges are contained, and the same holds when an insider abuses their access. Without managed role changes, long-term users tend to accumulate privileges, so periodic access reviews and identity governance help keep users to only the privileges their job functions require.
Common ways to apply it include separating normal user accounts from administrator and other privileged accounts, granting privileged access temporarily for a specific task, and giving administrators just enough permission for the job, with full system-wide access as the exception. Zero trust builds on the same idea, and NIST SP 800-207 states that access should be granted with the least privileges needed to complete the task.
Similar Terms
2 termsPAM
Least privilege is a principle. PAM is a set of controls that applies it to administrative access. Just-enough administration grants only the permissions a task needs, and just-in-time administration grants them only temporarily.
Zero Trust
Least privilege limits each entity to the access it needs. Zero trust is a broader model that removes implicit trust based on network location and grants access to each resource per session, with the least privileges needed to complete the task.
Frequently Asked Questions
What is the principle of least privilege?→
It is the principle that each entity in a system, whether a user or a process acting for one, is granted only the minimum resources and authorizations needed to perform its function.
Why is least privilege important?→
It reduces the impact of a compromise. A compromised account with excessive privileges can do more damage than one whose privileges are contained, and limiting privileges also reduces the harm an insider can cause by abusing access.
How do you implement least privilege?→
Separate normal user accounts from administrator and other privileged accounts, review and reconcile accounts and privileges periodically, remove entitlements that are no longer needed when roles change, and grant administrative access just in time and only for the task at hand.
Related
Sources
Definitions follow the government and standards body sources listed above. This site is not affiliated with the agencies or organizations cited.