least privilege
[Data Security]
The security objective of granting users only those accesses they need to perform their official duties. [NIST SP 800-12]