Principle of Least Privilege
The security concept of giving users and systems only the minimum access needed to perform their job, and nothing more.
The principle of least privilege↗ is the security concept that every user, application, and system should be granted only the minimum level of access needed to perform its specific job, and no more. An employee in accounting, for example, doesn't need access to engineering's source code repository.
Applying this principle limits the damage that can occur if any single account or system is compromised, since an attacker who steals a low-privilege credential can't automatically reach sensitive systems elsewhere. It also reduces the chance of accidental mistakes, like an employee deleting files they were never meant to be able to touch in the first place.