Unverified50% confidenceFactExact time
Least Privilege is a basic principle of information security: any principal (user, program or agent) should receive only the minimum permissions necessary to complete its task, and permissions should be time-limited.
1
Sources
50%
Confidence
Long-term
Relevance
10/24/2026
First Seen
Sources
Related Entities
Related Claims
Unverified只读/读写模式切换机制本质上实现了信息安全领域的最小权限原则（Principle of Least Privilege）80% similarUnverifiedThe principle of least privilege requires that a system or account be granted only the minimum access scope necessary to complete the current task; in connector and Bot configuration scenarios, even if a certain type of connector is selected, it does not mean automatically obtaining read and write permissions for all mailboxes, calendars, and folders under that account.69% similarUnverifiedData minimization is one of the core principles of data protection regulations such as the GDPR, requiring that systems collect and process only the minimum amount of personal data necessary to achieve their objectives.66% similarUnverifiedOwnership credentials (such as a manage secret) are only meaningful when the caller has persistence capability; alternatives friendlier to forgetful agents include soft ownership based on owner_hint, re-issuable short-term tokens, and downgrading ownership verification to auxiliary information.65% similarUnverifiedThe benefits of on-behalf-of-user authorization include security by default (inheriting the user's least privilege), development simplification (no need to repeatedly implement authorization logic), and clear auditing (data access is traceable to specific users).64% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1093530API
curl https://kongchang.com/api/v1/knowledge/claims/1093530MCP
get_claim(id=1093530)