https://nalar.dev/tags/least-privilege/ Recent content in Least Privilege on Nalar Hugo en-us Wed, 02 Sep 2026 00:00:00 +0700 https://nalar.dev/apply-least-privilege-to-application-access/ Wed, 02 Sep 2026 00:00:00 +0700 https://nalar.dev/apply-least-privilege-to-application-access/ <p>Least privilege is the practice of giving an identity only the access required to perform its current job. The identity may be a person, application, service account, CI job, or automated process.</p> <p>The principle sounds simple, but useful implementations go beyond creating a few roles. Permissions change over time, applications accumulate capabilities, and emergency exceptions often become permanent. Least privilege therefore needs both careful design and regular maintenance.</p> <h2 id="start-from-required-actions-not-convenient-roles">Start from required actions, not convenient roles</h2> <p>A common mistake is to begin with a broad role such as <code>admin</code>, <code>editor</code>, or <code>operator</code> and assign it because it makes an application work quickly.</p>