Which principle requires allocating the minimum privileges necessary to perform a role?

Which principle requires allocating the minimum privileges necessary to perform a role?

• A. Least Privilege
• B. Permissions
• C. Role-Based Access Control (RBAC)
• D. Attribute-Based Access Control (ABAC)

Answer: (A)

Least privilege is the practice of granting the minimum privileges necessary to perform a role. By giving users only what they need to do their job, you limit the potential damage from errors, misconfigurations, or compromised credentials. For example, a support technician might need read access to some systems and the ability to reset passwords, but not full administrative rights or access to production data. The other concepts describe how access is organized or decided, but they are not the specific principle described in the prompt: permissions refer to the rights attached to resources; Role-Based Access Control is a model that assigns access based on roles; Attribute-Based Access Control uses attributes to make dynamic decisions. While these models can implement least privilege, the established name for this practice is the minimum-privilege principle.

Least privilege is the practice of granting the minimum privileges necessary to perform a role. By giving users only what they need to do their job, you limit the potential damage from errors, misconfigurations, or compromised credentials. For example, a support technician might need read access to some systems and the ability to reset passwords, but not full administrative rights or access to production data. The other concepts describe how access is organized or decided, but they are not the specific principle described in the prompt: permissions refer to the rights attached to resources; Role-Based Access Control is a model that assigns access based on roles; Attribute-Based Access Control uses attributes to make dynamic decisions. While these models can implement least privilege, the established name for this practice is the minimum-privilege principle.