A security principle that requires giving users the minimum levels of access needed to perform their job functions, reducing the potential damage from accidental or intentional misuse.