Least privilege

Confinement technique in which each process is given only the minimum privileges it needs to function; also referred to as sandboxing. (. See also needtoknow. )Principle requiring that each subject be granted the most restrictive set of privileges needed for the performance of authorized tasks. Application of this principle limits the damage that can result from accident, error, or unauthorized use of an information system.