Duo enforces least privilege access to applications, data, and resources using granular access controls. Admins set role-based access policies to control users' access to specific apps, when they can connect, where they can connect from, and more. Your business is better protected from security breaches by limiting access to only what users need to perform their role.