Access Management - Concept
Least privilege
Giving each person or system only the access needed to do its job
What's it for?
Reduces harm from mistakes or stolen accounts by giving only the minimum access needed.
For example…
A reporting analyst can read finance dashboards but cannot export the raw payroll table or change security settings
A support analyst can reset user passwords but cannot change firewall rules because least privilege gives them only the access their role requires
Think of it like…
Hotel keycard that opens your room and the gym, not the cash office and every suite