Separation Of Privilege

The principle that builds on the principle of least privilege. It requires the use of granular access permissions—that is, different permissions for each type of privileged operation. This allows designers to assign some processes rights to perform certain supervisory functions without granting them unrestricted access to the system.