Least Privilege
The principle of least privilege states that no employee should have access to or authority over any system or data unless it is necessary for the employee to perform their job function.
2 slides · 1 min read · Domain 3
In organizations where classifications of material and clearances of personnel are utilized to control access to information, an additional safeguard is usually necessary.
For example, a database administrator may have full control over the layout and structure of a database but does not need to be able to view the data within the database; while this is often upsetting for the administrator, it limits the potential for the administrator to gain knowledge of multiple organizational efforts and projects, and thus, disclose valuable information about operations (maliciously or inadvertently).
The aforementioned job description is crucial for determining least privilege of each position and role within the organization.