What is the principle of least privilege, and how does it apply to user access management?

The principle of least privilege holds that every user, and every privileged account, should have access to exactly what they need to do their job, and nothing more. In practice, organizations accumulate over-permissioned accounts as employees change roles, take on temporary projects or are granted broad access for convenience. These excess permissions represent a serious risk: a compromised over-permissioned account gives an attacker far more reach than necessary. G6 implements least privilege as the governing principle of our user access management program and regularly audits compliance.