Least Privilege
The principle of least privilege requires that every identity (human or machine) operates with only the minimum permissions necessary to complete its current task. No more access than needed, no longer than needed. It is a foundational concept in access management and a prerequisite for meaningful security posture.
Why Least Privilege Matters for AI Agents
Least privilege has been a security principle for decades, but implementation has been inconsistent. In practice, most organizations grant more access than necessary because the cost of managing granular permissions exceeds the perceived risk of over-provisioning.
AI agents change this calculus. Because agents can request, receive and release permissions programmatically, granular permission management becomes operationally feasible. An agent does not experience friction from requesting scoped access for each task. The governance layer handles it in milliseconds.
From Least Privilege to Zero Standing Permissions
Zero standing permissions is least privilege taken to its logical conclusion: instead of reducing standing access to the minimum, eliminate standing access entirely and provision exactly what each task requires.
Common Questions
Is least privilege the same as zero trust?
No. Least privilege is one principle within a zero trust model. Zero trust assumes no identity is trusted by default and verifies every request; least privilege governs how much access each verified identity gets once it is trusted.
How does least privilege differ for AI agents and human users?
People find constant permission prompts disruptive, so organizations over-provision to avoid friction. Agents request and release access programmatically, so scoped per-task permissions become practical to enforce at scale.
What is the difference between least privilege and zero standing permissions?
Least privilege minimizes standing access. Zero standing permissions removes it entirely: the agent holds no persistent access and is granted exactly what a task needs, then that access is revoked.