The principle of least privilege states that users should only have access to the resources they need to do their jobs — nothing more. Implementing this principle dramatically reduces your attack surface.
For the full article, visit invincia.com/blog/how-to-implement-a-least-privilege-policy.