Conceptual
Login

Least Privilege Principle

Grant each identity only the specific permissions its task requires and nothing more, so a compromised component's blast radius is bounded by its narrow grant rather than by everything the system can do.