Topic summary

Principle of least privilege

Principle of least privilege

In information security and computer science, the principle of least privilege (PoLP), principle of minimal privilege (PoMP), or principle of least authority (PoLA) requires that, in a particular abstraction layer of a computing environment, every module (such as a process, a user, or a program, depending on the subject) must be able to access only the information and resources that are necessary for its legitimate purpose.