Least Privilege

Least privilege gives an identity only the permissions needed for its assigned work. Permission includes both an operation and its resource scope: reading assigned orders is different from exporting every customer's records.

Reading does not authorize a refund

An assistant can have permission to read an order status while lacking permission to issue a refund. The application must evaluate the requested action separately. A prompt that asks the model to act as an administrator does not change that authorization.

Service identities also need limits. A broadly privileged service should not lend all its privileges to every user request.

Keep the limit current

Deny requests without an applicable allowance, enforce checks in trusted services, and test allowed and denied cases. Remove permissions when work or membership changes. A hidden button is not enforcement if the operation remains callable directly. Record enough decision evidence to investigate failures without copying unnecessary sensitive content.

Reference: OWASP Authorization.