• The requirement that in a particular abstraction layer of a computing environment, every module (such as a process, a user, or a program, depending on the subject) must be able to access only the information and resources that are necessary for its legitimate purpose. The principle means giving a user account or process only those privileges which are essential to perform its intended function. ← Wikipedia

1. Previous term: Principle of Least Knowledge
2. Next term: Principle of Least Surprise
3. Random term: CR