Record metadata

type: "Glossary term"
title: "Least privilege"
description: "Granting only the minimum authority needed for a task."
tags: [glossary]
generated: { by: human:crpage, at: 2026-07-09T09:44:00Z }
aliases: "least privilege; narrow scope"
status: stable

Definition

Granting an agent only the minimum authority needed — narrow scopes rather than broad roles, separating read tools from write tools, and time-bounding access.

Used in this bundle

Appears in: identity-and-authorisation.

confused deputy, sender constrained token.

Definition

Used in this bundle

Related terms