A recommended security practice in which every user is provided with only the minimum privileges needed to accomplish the tasks they are authorized to perform.