From the course: Complete Guide to Cybersecurity: A Practical Approach

Unlock this course with a free trial

Join today to access over 24,400 courses taught by industry experts.

Exploring the principle of least privilege

Exploring the principle of least privilege

From the course: Complete Guide to Cybersecurity: A Practical Approach

Start my 1-month free trial Buy for my team

Exploring the principle of least privilege

“

- [Instructor] The principle of least privilege is a standard of permitting only the minimum access necessary for users, or programs, or applications to fulfill their function. Users are provided access only to the systems and the programs that they need to perform their specific job or in a specific task. Privilege access management provides the first and probably the most familiar use case. For example, let's say you have a user that is granted different privileges to create, read, update, and delete information within a database. Now these types of privileges typically are done in a static way, so basically they're effectively on, on a 24 hours a day every day, 365 days a year. On the other hand, there's another concept called just-in-time privilege access management, and this includes role-based specifics for privileges that are only becoming active in real time whenever the proof identity requests the use of a resource or a service. Another term that I would like for you to…

Contents