Only assign a user (or process, program, etc.) the minimum amount of privileges they need to do their job.
[[principles]] [[security]]