A security principle that grants users only the minimum permissions necessary to perform their job functions, reducing the attack surface.
Category: authorization. Part of the Identity Technologist Glossary — more than 200 practitioner-grade definitions covering identity verification, KYC/AML, biometrics, fraud prevention, and compliance. See all terms at https://identitytechnologist.com/glossary.