Feature of a system in which operations are granted the fewest permissions possible in order to perform their tasks.

Principle that requires that each subject be granted the most restrictive set of privileges needed for the performance of authorized tasks. This also applies system privileges that might not be needed to perform their assigned job.note Application of this principle limits the damage that can result from errors, accidental and unauthorized use of an AIS.

a security administration principle wherein each user is provided only the minimum set of rights needed to accomplish their authorized tasks. Issuing the most restrictive set of privileges may minimize damages from unauthorized use and error.