Privilege minimization is the practice of giving each user, service, or administrator only the access required to do a specific job or mission, and nothing more. It is a core security principle because every extra permission increases the chance that a mistake, stolen credential, or malicious insider can reach sensitive data or system functions.
In real environments, privilege minimization is enforced with role-based access control, just-in-time elevation, approval workflows, and periodic access reviews. It matters in insider-threat cases and in attacks that compromise legitimate accounts, because the attacker inherits whatever permissions the account already has. Strong minimization reduces the blast radius: even if one account is abused, segmented data, limited query rights, and restricted administrative tools can prevent broad disclosure or system-wide damage. It works best when combined with audit logging and separation of duties.