The principle of least privilege states that we should give users, services, etc the minimum privilege they need to function, so that when the entity is compromised, only a minimum amount of the infrastructure/asset will be endangered.