What is least privilege and why is it critical in account management?

• A. Grant only the minimum rights needed; reduces risk of abuse, compromise, or accidental data exposure.
• B. Always grant admin rights to all users.
• C. Disable MFA to simplify.
• D. Use the same password for all accounts.

Answer: (A)

Least privilege means giving each user only the access they actually need to do their job, no more. This is crucial in account management because it limits how much damage can be done if an account is compromised, misused, or makes a mistake. When permissions are tightly scoped, a single compromised account or a faulty action can’t easily affect everything—the blast radius is smaller, and it’s easier to detect and contain issues. In practice, this means defining clear roles and permissions, reviewing access regularly, and using methods like need-to-know, role-based access control, or just-in-time elevation so permissions are granted only when necessary and for a limited time.

The best choice reflects this idea by stating to grant only the minimum rights needed and noting how that reduces the risk of abuse, compromise, or accidental data exposure. In contrast, giving admin rights to everyone would dramatically expand what each user can do, increasing risk. Disabling MFA and using the same password across accounts are security practices that undermine authentication and make breaches far more likely, so they don’t align with the principle of least privilege either.