Least privilege
Give a system only the permissions its task needs — read-only unless writing is the job.
01In short
Give a system only the permissions its task needs — read-only unless writing is the job.
In productionYour agent should not have more access than your intern.
02Video
slot · videoLeast privilege in 90 secondsadd: GUIDES['least-privilege'].video
03Guide
slot · guide
A step-by-step guide for “Least privilege” goes here. Suggested outline:
- What it is — in one paragraph
- Why it matters in production
- How to do it — 3 to 7 steps
- Pitfalls we see in the field
04Checklist
slot · checklist
Four to eight things a team can tick before go-live.
05FAQ
slot · FAQ
The three questions clients actually ask about “Least privilege”.
06Related terms
AgentsAI agentAn LLM that can take actions: it plans, calls tools, looks at the results and decides the next step until a goal is reached.AgentsTool callingA model’s ability to request a defined action — query a database, send an email, call an API — with structured arguments that your code executes.
Where we help · Secure