A governance workflow needs to follow the principle of least privilege. Which choice best matches that principle?
Select an answer to reveal the explanation.
Short Explanation
You should grant each role only the permissions needed for its governance tasks. Least privilege is scoped to the task, not to convenience or seniority.
Full Explanation
The correct choice is granting each role only the specific permissions needed for its assigned governance tasks, and nothing beyond that. Least privilege ties access to what a role must actually do, minimising the blast radius if an account is misused or compromised. Granting broad administrative access up front is incorrect because it is the pattern least privilege avoids. Granting access by seniority is incorrect because seniority is not a proxy for task-based need. Granting temporary elevated access that is never reviewed is incorrect because unreviewed elevated access accumulates risk over time. For the exam, tie least privilege to the specific task a role performs, not to rank or convenience.