Every person gets only the minimum permissions necessary to perform their job. About what actions you are allowed to take. Distinct from need to know, which is about what data you are allowed to see.
Want to actually apply concepts like this instead of just reading definitions?
Practice free on Zamlom