Principle of Least Privilege # User should only have access rights limited to only what’s necessary for tasks to do their job.