Least privilege means task, time, and role

The move: reduce every share to task, time, and role. Least privilege sounds abstract until you apply it to a file. Ask three questions: Task What does this person need to do? Viewing, commenting, editing, downloading, and resharing are different powers. Give the weakest permission that still lets the work happen. Time How long is the access needed? A review link for a two-day approval should not become permanent access to the file. Role Does this person currently have a business reason to see the file? Role changes, vendor transitions, and completed projects all create stale access. These three limits…

Sign up free — one personalized lesson every day, matched to your role and goals.

Already have an account? Sign in