Definition
Granting an identity or component only the minimum permissions needed for a bounded task, for no longer than needed.
Distinguish it from nearby terms
Least privilege limits permission; least authority additionally emphasizes narrowing the form and scope of capabilities.
Check your understanding
Agent credentials should be scoped per run, resource, operation, and environment.