# Least-Privilege Credential

> A technique for issuing each caller a credential that grants only the operations it performs.

Record: `lexicon:least-privilege-credential`
Kind: technique
Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md)
Canonical: https://banes-lab.com/ontology/lexicon#lexicon-least-privilege-credential

Listed in [Lexicon terms](https://banes-lab.com/api/records/lexicon.md), after [Secret Rotation](https://banes-lab.com/records/lexicon/secret-rotation.md) and before [Centralize Policy](https://banes-lab.com/records/lexicon/centralize-policy.md).

## Category

- [Security Privacy Compliance](https://banes-lab.com/records/lexicon-category/security-privacy-compliance.md)

## Refactors

- [Secret Sprawl](https://banes-lab.com/records/architecture/secret-sprawl.md)
- [Least Privilege](https://banes-lab.com/records/architecture/least-privilege.md)

## Linked from

- [Anti-patterns](https://banes-lab.com/ontology/principles/architecture-category-anti-patterns.md)
- [Security / Privacy / Compliance / Governance](https://banes-lab.com/ontology/principles/architecture-category-security-privacy-compliance-governance.md)