Principle of Least Privilege (POLP)

POLP helps maintain computer security. The user or component starts off with no privileges and is only given those considered necessary. While this seems like common sense, in reality the practice is difficult to achieve because more security systems assign rights based on membership in groups rather than as individuals. Steps for implementing POLP include: Map job functions privileges Avoid assigning privileges directly to a guest or the public Untangle the web of user entitlements Monitor privileges