Glossary: Identity and Access Management

least privilege

The principle of giving each person or program only the access it needs, and ideally only for as long as it needs it. Asking for the smallest OAuth scopes, giving service accounts limited rights and granting just-in-time admin rights that expire are all ways to apply it.