SecurityIntermediate

Least privilege

Giving an identity only the access needed to perform its required tasks.

In the real world

A read-only reporting account should not be able to delete database tables.

Related

Go a little deeper