Least privilege

Giving every person, program and device only the access its job needs, and taking rights away when the job changes. Jo may run only the command that restarts printing, so a stolen password gets the thief one harmless command.