Watch this video on YouTube
What is the principle of least privilege in the context of access control?