Qu'est-ce que « Least privilege, role-based access control » ?

Least privilege gives each person and program only the permissions its task needs, for only as long as it needs them. Role-based access control grants permissions — an action on a resource — to roles and roles to people, so that access follows the job rather than the individual.