What is least privilege?
Least privilege is the principle that a user, a system or an AI agent should have only the access the task requires.
The principle has long been part of information security. NIST describes it as giving each user or process the resources and authorisations it needs for its function, and nothing more.
The less access there is, the less harm a mistake, a hijacked account or a tricked model can do. That applies to people and software alike.
With AI the principle becomes especially clear. An AI assistant should be able to read only what the user is allowed to see, and an AI agent should be able to carry out only the actions the task requires.
How it works
In practice it comes down to roles and boundaries. One role may read certain folders, another may also change them. For an AI agent it can mean reading the calendar but needing approval to book, or writing drafts that a person then sends.
Access should also be limited in time. Access that is needed only for a project is removed once the project is finished.
Why it matters
The principle limits the consequences when something goes wrong. If a model is tricked through prompt injection, it can do only what its permissions allow. With tight limits from the start, a mistake is easier to assess and put right.
What to keep in mind
Watch out for accounts shared between several tools or people. Access then cannot be limited, and the log does not show who did what.
Combine the principle with the four-eyes principle for the changes that matter most, such as new roles or wider permissions.
What it means for you
Review the permissions your AI tools have been given. When a tool is installed, it is easy to grant more than it needs.
Common questions
Does least privilege apply to AI too?
Yes. An AI assistant should never be able to read more than the user, and an AI agent should have only the rights the task requires.
Where do we start?
Begin with the accounts and tools that reach the most, and ask what they actually need. Read more about access control.
Sources: NIST on least privilegeAccess control at IMY (in Swedish)
Related terms
Read more
All terms Updated