Least Authority

Definitions

1. A security principle that a component or actor should have only the minimum authority needed to perform its intended function and nothing more. It is closely related to least privilege, especially in capability-based systems and secure software design.

   In plain English: Giving each user or component only the minimum power required.

   Example: "The service was redesigned around least authority so each worker could access only the exact queue and secret it needed."

Related Terms

• Privilege Escalation
• Authorization
• Deny by Default
• Endpoint Privilege Management
• Minimum Privilege
• Overprivileged
• Principle of Least Privilege
• Privilege Management