Least privilege means giving a person or app the minimum access needed for a task, for no longer than necessary. It does not mean blocking useful features; it means choosing a narrower permission when that still works.
A useful example
A colleague needs to read a document for one week. Viewer access to that file is more appropriate than editor access to the whole folder. A mobile app that needs location only while open does not need permanent background location. If the narrower choice breaks the task, review the specific feature before broadening access.
Use it today
Review one shared file, one connected app and one device permission. Ask: who has access, what can they do, and when should access end? Microsoft's
least-privilege guidance applies the principle to app access. Our
file-sharing guide turns it into a concrete choice.
Practical distinction
Viewer versus Editor is a capability choice; one named recipient versus anyone with a link is an audience choice. Both matter, and each can be narrowed separately.
