What is the principle of least privilege?

Least privilege means giving an account only the permissions required to perform its intended responsibilities, and no more.

For example, a reporting application that only reads selected tables should not normally receive db_owner or sysadmin privileges. Least privilege reduces the potential impact of compromised credentials, programming errors, and accidental administrative actions.