Software → Security
Least Privilege
A security principle where users, services, and systems get only the access they need.
Motivation
Least Privilege matters because it gives teams a shared way to reason about a security principle where users, services, and systems get only the access they need.
Where it fits
Least Privilege belongs to the software track and the Security layer. It is useful when teams need to connect design decisions to practical engineering work.
Mental model
Think of Least Privilege as a named pattern in the engineering map: it explains what problem is being solved, what boundaries are involved, and what tradeoffs appear when systems grow.
Common mistakes
- Treating the term as a buzzword instead of tying it to concrete behavior.
- Ignoring the operational, security, or product constraints around it.
- Learning the definition without knowing where it appears in real systems.