What is a common mistake when working with least privilege?

A common mistake with least privilege is using one highly privileged shared service account for convenience turns a compromise in any caller into broad system access. The safer approach is to design and test the behavior explicitly rather than assuming the platform or dependency will handle it automatically.