Access control

Ensures that entities receive only the minimal permissions required, preventing unnecessary privilege escalation.

Web application: assigning user roles during registration; Operating system: launching a service with reduced rights; Cloud infrastructure: provisioning IAM policies for microservices

Enterprise applications, operating system services, cloud platforms, container orchestration, security frameworks

design system → assign minimal required permissions → enforce least privilege

• role
• permission
• access
• policy
• privilege
• grant
• deny

• grant admin rights instead of specific permissions → over‑privilege risk
• use group memberships as a shortcut → may hide excessive rights

Assigning broad admin roles to developers → leads to unnecessary access; Forgetting to revoke temporary privileges after task completion → leaves elevated rights lingering; Assuming default permissions are minimal without verification → results in hidden over‑privilege

Defense in depth – broader layered security vs. least privilege focuses on minimal rights; Need‑to‑know – information restriction vs. least privilege applies to any capability

Coming from Windows: using 'Run as administrator' by default → forget to drop privileges in Linux where unprivileged users are the norm; Coming from JavaScript: relying on sandboxed iframes instead of explicit permission checks → may miss OS‑level privileges

• defense in depth
• role‑based access control
• need‑to‑know

Do not apply least privilege when performance-critical code requires frequent privilege changes, as switching contexts can be costly; Reducing privileges may introduce additional permission checks that slightly increase latency; In environments with dynamic permission requirements, over‑restricting can cause functional failures if needed rights are omitted

Properly applying least privilege limits the impact of compromised accounts, reduces insider threat vectors, and simplifies compliance audits.

Think of a keycard that opens only the doors you need, not the entire building.

Often combined with role‑based access control (RBAC) to manage groups of permissions efficiently.

Implement role‑based access control (RBAC) with fine‑grained policies