A policy of granting users or applications only the permissions necessary to perform their official duties.