Least Privilege Architecture

A design approach that grants an actor only the permissions a task requires and enforces those limits in systems the actor cannot modify, typically through allowlisting proxies, scoped short-lived tokens and downstream authorization checks.