The principle of least privilege consists of granting an identity only the permissions strictly necessary for its task, for the time needed. It limits the impact of a mistake or a compromise. In practice: precise roles rather than global administrator, regular review of permissions.