SQL Server Interview Question #183
What is the principle of least privilege?
Security, Backup, Recovery, Administration & Real-World Scenarios Senior Advanced
Quick Interview Answer
Least privilege means giving an account only the permissions required to perform its intended responsibilities, and no more.
For example, a reporting application that only reads selected tables should not normally receive db_owner or sysadmin privileges. Least privilege reduces the potential impact of compromised credentials, programming errors, and accidental administrative actions.
Detailed Explanation
Least privilege means giving an account only the permissions required to perform its intended responsibilities, and no more.
For example, a reporting application that only reads selected tables should not normally receive db_owner or sysadmin privileges. Least privilege reduces the potential impact of compromised credentials, programming errors, and accidental administrative actions.