The principle of least privilege means…
Options
- Every new user is given admin rights by default
- Each user or token gets only the permissions it needs (Correct option)
- Only a single admin account exists for everything
- Passwords must be kept short and easy to type
Answer
Every user, service and token gets only the minimum permissions needed, for the minimum time
Why
Give each person, program or key only the access it really needs. A reporting script gets read-only access to one table, not admin on the whole database.
If that account is ever compromised, the damage (the 'blast radius') is small.
Review permissions regularly and remove what is no longer needed.
Remember
Minimum access needed, nothing more.