In access control, what does 'least privilege' mean?

• A. Grant more rights than necessary to ensure efficiency.
• B. Grant all access to those who request it.
• C. Grant only the minimum access rights required for a role.
• D. Allow access based on seniority.

Answer: (C)

Least privilege means giving each user only the minimum set of permissions needed to perform their job. This keeps access tightly scoped to actual task requirements, reducing the risk if an account is compromised or misused.

The correct statement reflects that idea: only the minimum access rights required for a role. Granting more rights than necessary, granting all access to those who request it, or tying access to seniority do not align with the principle and can create unnecessary risk.