least privilege

Giving each account only the rights it needs. A backup service account needs backup rights, not global admin.

Where the book teaches it