The least-privilege principle refers to granting an identity only the rights and privileges it needs in order to function. A simple, centralized way of managing and securing privileged credentials is needed, as well as flexible controls to balance cybersecurity and compliance requirements with operational and end-user requirements.