Least privilege applies to people, services, database roles, devices and automation. Rights derive from a task rather than convenience or hierarchy.
Practical quality is visible during revocation: temporary roles expire, membership changes take effect promptly and administrative functions are separately recorded and reviewable.
Three verification questions
- 01Is every right mapped to a specific purpose?
- 02Do temporary rights expire automatically?
- 03Is administrative access separately traceable?