Principle of Least Privilege
The rule that every identity should hold the minimum access needed to do its job — no more, "just in case."
aka: PoLP, minimal access
Least privilege is the design goal that just-in-time access, birthright templates, and access certification all serve in different ways — none of them work as intended if the target itself isn’t the smallest access that gets the job done.