Least privilege
Also: least-privilege
Giving a system only the access it needs for the job, and nothing more.
The fuller definition
Least privilege means granting only the access needed for the authorized task, for the necessary scope and duration.
- Task
Summarize five files
- Access
Read those files only
- Excluded
Unneeded actions and data
A simplified relationship, not a screenshot or a complete design.
A concrete example
A document-summary workflow gets read access to selected records without access to email sending or deletion.
The distinction that matters
Smaller access scope reduces consequences of errors; it does not make generated content accurate.
Related terms
Permission
What an AI system is allowed to see or do, set by the people who run it.
APIs & softwareAuthorization
Checking what someone who has logged in is allowed to do.
Reliability & securityPrompt injection
Text in a source that tries to redirect an AI tool. It may tell the tool to ignore your rules or leak data.
Where it is taught
Test an AI workflow on work you can assessSource and further reading
OWASP · Prompt injectionThe definition and example are written for this library. The link gives background, official documentation or legal authority as labelled. Legal scope depends on the jurisdiction and current text; product features depend on release and settings.