Authorization and the principle of least privilege

The principle of least privilege is a core principle of zero trust. To adhere to this principle we must ensure that users only have access to what they need to perform their function. To this end we need fine-grained controls over the resources each user can access.