A short-term contractor supporting one GIS project is granted only the permissions required for that project instead of standing admin rights 'just in case.' Which principle is the city following?
Select an answer to reveal the explanation.
Short Explanation
Give the contractor the keys to that one GIS closet—not the master ring for city hall. Least privilege means only what the job needs, nothing 'just in case.' Standing admin and shared break-glass passwords in a wiki are how temporary help becomes a permanent risk.
Full Explanation
The principle of least privilege grants identities only the permissions required for their assigned tasks and duration. Standing admin or owner roles for temporary contractors and shared public break-glass passwords violate that principle and expand blast radius. Cloud+ security best practices emphasize least privilege for human and workload identities in cloud environments.