Zansa › Answers › Privacy, security and ownership
What is the principle of least privilege and how do I apply it?
Least privilege means giving each person or system only the access needed to do their job, and nothing more. Apply it by starting from no access, granting specific permissions for defined roles, preferring read-only access where editing is not needed, and reviewing permissions regularly.
Practical steps:
- Define roles, such as finance viewer or sales viewer, rather than granting access individually
- Use read-only access for tools that only need to read
- Grant time-limited access for temporary needs
- Review access every few months and after staff changes
It limits the harm from mistakes and compromised accounts. Rules differ by country and sector, so check how this applies to you with a qualified adviser.
Want this applied to your business? Zansa builds dashboards and forecasts for small and mid-sized companies worldwide. Start with a free intro call.
Book a call