Glossary · Evaluation & safety

Least Privilege

Giving a model, agent, tool, or user only the permissions required for the current task, for only as long as those permissions are needed.

Why it matters

Models can make mistakes or follow malicious instructions. Narrow permissions reduce the damage any one failure can cause.

In practice

Give a documentation agent read access to source files and write access to one branch, but no production credentials or merge permission.

Common confusion

Authentication proves identity. Least privilege limits what that identity can do.

Related terms

Browse the learning paths to see this term in context — every lesson is free to read.