What is least privilege?

Least privilege grants users, services, and automation only the permissions required for their current responsibilities and no broader access than necessary. It limits the blast radius of mistakes, credential theft, and compromised components.