Least privilege principle

• Grant access as needed

• Enforce seperation of duty

• Avoid long-term credentials