# Minimal Permissions

> The requirement that each principal hold only the permissions its function needs.

Record: `lexicon:minimal-permissions`
Kind: constraint
Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md)
Canonical: https://banes-lab.com/ontology/lexicon#lexicon-minimal-permissions

Listed in [Lexicon terms](https://banes-lab.com/api/records/lexicon.md), after [Minimal Exposure](https://banes-lab.com/records/lexicon/minimal-exposure.md) and before [Mitigation](https://banes-lab.com/records/lexicon/mitigation.md).

## Category

- [Security Privacy Compliance](https://banes-lab.com/records/lexicon-category/security-privacy-compliance.md)

## Required by

- [Least Privilege](https://banes-lab.com/records/architecture/least-privilege.md)

## Linked from

- [Security / Privacy / Compliance / Governance](https://banes-lab.com/ontology/principles/architecture-category-security-privacy-compliance-governance.md)