Least privilege limits the permissions available to an actor instead of granting broad access by default. Scope may be restricted by resource, action or duration. The aim is to make the access fit the task and reduce the consequences of mistakes or compromised credentials.
The principle requires enforced access controls, not just instructions asking an agent to behave carefully. Permissions need review as responsibilities change, and broader access should require an appropriate authorisation decision.
ELI5
Imagine lending a helper a key to the supply cupboard for one job rather than a master key to the entire building.
For example, an assistant preparing a report may read selected records without receiving permission to delete the database.
Does least privilege mean giving no access?
No. It means providing the access necessary for authorised work while withholding unrelated powers.
Can a prompt enforce least privilege?
A prompt can describe a boundary, but the surrounding tools and access controls must actually prevent actions outside that boundary.
