Least Privilege
Category: Infrastructure“LEEST PRIV-uh-lij”
Giving a person or an AI exactly the access needed for the job and nothing more.
Lesson #9: Securing AI Agents: Cybersecurity Essentials →A subcontractor key that opens the one unit they're working in, not the whole building.
A dog walker gets a code for the side door only, not your alarm system and safe.
The scheduling agent can read job dates and write crew assignments, but cannot touch payroll.
A reporting AI gets read-only database access, so even a compromised key can't delete a single record.
It's the cheapest security control there is: it shrinks the damage of every mistake and every breach.
Least privilege means granting only the minimum access required for the task.
Pick one AI tool you use and write down what it can access. Cross off anything it doesn't truly need.
Hover or focus a choice to preview the new review date.
Exercises by category
- Agents0/21 · 0%
- Models0/10 · 0%
- Data0/11 · 0%
- Infrastructure0/22 · 0%
- Fundamentals0/15 · 0%
- NobleHub0/20 · 0%
Next badge: First Nail — 1 more exercise
Related terms
Picked automatically from the same category and the ideas this term shares.
Hand-picked pair
A security approach where every request is verified every time, even from inside your own network or from your own AI.
Hand-picked pair
A secret string of characters that proves which account is making a request, so a service knows who to trust and bill.
Hand-picked pair
A checkpoint where a person must say yes before an AI is allowed to do something with money, contracts, safety, or the law.
Same category: Infrastructure
Getting into a company by compromising something it depends on — a vendor, a plugin, or a piece of borrowed code.
Same category: Infrastructure
The rules and controls over what an AI is allowed to remember about you and who can see it.
Same category: Infrastructure
A tamper-resistant record of who did what, when, and to which record — including actions taken by an AI.