A municipal parking-permit counter uses one retrieval assistant. The front-desk identity can pull permit files and can also search employee personnel folders. What boundary should the leader set?
Select an answer to reveal the explanation.
Short Explanation
Least privilege: a front-desk identity may retrieve permit files, not employee personnel folders. One convenient index is not a reason to collapse those roles. Renaming the HR folder is not an authorization control.
Full Explanation
Least privilege is an authorization boundary on what each identity may retrieve. A front-desk role that serves permit holders has no business opening employee personnel files. One convenient index is not a reason to collapse those roles. Leaders should require the assistant to honor the same boundaries the counter already uses on paper.