Academy
What is least privilege?
Glossary · AI agent and machine identity security
Short answer
Least privilege means giving an identity only the access it needs for its task and nothing more.
Why it matters
Agents are often given broad access because it is faster. Broad access turns a small mistake into a large one.
Least privilege is easy to state and hard to keep, because needs change and old grants stay.
What it looks like
An agent that summarises tickets needs read access to tickets. It does not need to write to the billing system.
In nerl0
The Security Graph helps you see where an identity holds more than its task requires, and Issues point to the grant to remove. See Issues.