Glossary: Application and Credential Attacks, and AI Risks

least privilege

Giving an account, service or AI only the permissions it needs, such as letting Kettle Helper read only the signed-in customer's orders. It limits the damage an attack can do.