Least privilege

Description
Only grant the minimum privilege that is required for the operation.