# SEC03-BP02: Grant least privilege access

## Description

Chỉ cấp quyền tối thiểu cần thiết.

## Implementation Guidance

- Start with no permissions
- Add only what's needed
- Regular permission audits
- Remove unused permissions
- Just-in-time access

## Risk Level

High - Over-privileged accounts increase blast radius.
