Security · Website glossary

Least privilege

Quick answer · What is Least privilege?

The principle of granting only the access needed for a person's or system's current task.

IN PRACTICE

Least privilege: an example

A freelance editor receives content access without unnecessary domain or billing control.

KEEP IN MIND

Access should be reviewed when responsibilities change; a narrow role can become inappropriate over time.

Put the idea to work

Frequently asked questions

What is a practical example of Least privilege?

A freelance editor receives content access without unnecessary domain or billing control.

When should access be reviewed after a role is narrowed?

Access should be reviewed when responsibilities change; a narrow role can become inappropriate over time.

Which concepts should I read alongside Least privilege?

Authorization: The decision about which actions or resources an identity is allowed to access.
WordPress role: A named collection of capabilities assigned to a user account.