{"id":61246,"date":"2022-03-29T15:00:00","date_gmt":"2022-03-29T19:00:00","guid":{"rendered":"https:\/\/jumpcloud.com\/?p=61246"},"modified":"2022-11-17T17:43:40","modified_gmt":"2022-11-17T22:43:40","slug":"what-is-least-privilege","status":"publish","type":"post","link":"https:\/\/jumpcloud.com\/blog\/what-is-least-privilege","title":{"rendered":"What Is Least Privilege and Why Do You Need It?"},"content":{"rendered":"\n<p>If you were going on vacation and hiring someone to watch your house, would you leave them your spare key? Or would you give them your full set of house and car keys, several credit cards, and your social security card?&nbsp;<\/p>\n\n\n\n<p>The answer should be obvious. Of <em>course<\/em> you wouldn\u2019t give a stranger keys to your whole kingdom. In fact, especially savvy clients may spend time figuring out the very least access they could give a house sitter without interfering with their job.&nbsp;<\/p>\n\n\n\n<p>The idea of giving employees the lowest-possible access to do their jobs is called the principle of least privilege (PoLP), and it\u2019s just as important in business environments as it is in your own home. PoLP is an essential component to <a href=\"https:\/\/jumpcloud.com\/blog\/privileged-access-management\">privileged access management (PAM)<\/a>. In this article, you\u2019ll learn what least privilege is and why it needs to be a part of your organization\u2019s security strategy.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Definition of Least Privilege&nbsp;<\/h2>\n\n\n\n<p>To get started, let\u2019s get a clear idea of what PoLP entails. Least privilege is the concept of giving users the least possible access to company resources like servers, applications, and devices, without interfering with their job. It\u2019s a balance between maintaining the highest standards of security, without compromising productivity.&nbsp;<\/p>\n\n\n\n<p>Least privilege is also an integral part of a holistic privileged access management (PAM) security strategy. PAM is the overall framework of how your company manages and secures privileged accounts and devices (that is, accounts with more than average clearance or access). It\u2019s made up of two main principles: least privilege and privileged access.&nbsp;<\/p>\n\n\n\n<p>It\u2019s important to note that while least privilege is most commonly used in the context of user accounts, it\u2019s not exclusive to managing employee identities. PoLP can \u2014 and should \u2014 also be used to manage networks and devices.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Privileged vs. Non-Privileged Accounts&nbsp;<\/h3>\n\n\n\n<p>While least privilege in the context of PAM is about managing privileged accounts, the term itself is not superuser-exclusive. Every employee, regardless of account type, should be given minimum necessary access to company resources. But what that access looks like will differ depending on account type.&nbsp;<\/p>\n\n\n\n<p><strong>Privileged accounts<\/strong> (sometimes called superuser accounts) have access above and beyond the standard user options. <\/p>\n\n\n\n<p>Think administrator overrides, the ability to access sensitive or classified company information, or the ability to remotely push updates to multiple user devices. These accounts may belong to executive leadership or IT teams.&nbsp;<\/p>\n\n\n\n<p><strong>Non-privileged accounts<\/strong> (sometimes called standard accounts) have only basic access to the servers and applications necessary to do their job.<\/p>\n\n\n\n<p> While a non-privileged user in marketing may have fuller access to Adobe Creative Suites than an accountant, neither of them can use administrative overrides in their applications. This is the \u201ctypical\u201d employee account, and in a normal organization, 85-90% of all accounts should be non-privileged.&nbsp;<\/p>\n\n\n\n<p>Note that though privileged and non-privileged accounts are different, the principles of least privilege should be applied to <strong>all<\/strong> user accounts in your organization, not just privileged ones.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Least Privilege Examples&nbsp;<\/h3>\n\n\n\n<p>Using our example of the house sitter from the intro, let\u2019s take a closer look at least privilege in action. Say that all your house sitter needs to do every day is water your plants. Normal privilege may be giving them a garage door opener or keys to your house. But least privilege challenges you to be even <em>more<\/em> secure.&nbsp;<\/p>\n\n\n\n<p>Instead of giving the sitter whole-house keys, what if you only gave them a key to the greenhouse in your backyard, and before going out of town you moved all your houseplants into the greenhouse? This gives them access to do what you\u2019re paying them for, but no more.&nbsp;<\/p>\n\n\n\n<p>Now, let\u2019s apply PoLP to businesses. Check out the three examples below.&nbsp;<\/p>\n\n\n\n<ul><li>An in-house IT administrator\u2019s account is <em>privileged<\/em>, since they can access the underlying tools that manage user passwords, remote overrides, and software updates. But <em>least privilege <\/em>ensures that that account can\u2019t access sensitive financial info or employee files.&nbsp;<\/li><\/ul>\n\n\n\n<ul><li>A CFO\u2019s account is <em>privileged<\/em>, since he or she can access all company financial documents, spreadsheets, and servers. But under <em>least privilege<\/em>, even the CFO can\u2019t access IT admin resources.<br><\/li><li>An externally contracted web designer may still have a <em>privileged<\/em> account if they have access to the back end of the company website. But the principle of <em>least privilege<\/em> will ensure they can\u2019t access any employee-only resources or information.&nbsp;<\/li><\/ul>\n\n\n\n<p>Notice a similarity in all four of these examples: least privilege doesn\u2019t keep any of these people from doing their job. If anything, least privilege acts as guardrails to keep them focused on <em>their <\/em>scope, and nothing else.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Importance of Least Privilege&nbsp;<\/h2>\n\n\n\n<p>To understand least privilege is to appreciate its value. But the importance extends far beyond increasing your organization\u2019s security posture. PoLP also offers users a more focused, streamlined experience, and makes it easier for your company to prove compliance.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Decreased Risk of Cyberattacks&nbsp;<\/h3>\n\n\n\n<p>Let\u2019s get the obvious one out of the way: least privilege ensures the least amount of people possible have access to your company\u2019s most sensitive apps and data. And the fewer people who can access it, the fewer opportunities cybercriminals have to compromise an identity.&nbsp;<\/p>\n\n\n\n<p>This is especially important in the remote-first business environments many of us now work in. According to Verizon\u2019s 2021 Data Breach Investigations Report, <a href=\"https:\/\/www.securelink.com\/blog\/81-hacking-related-breaches-leverage-compromised-credentials\/\" target=\"_blank\" rel=\"noreferrer noopener\">61% of all data breaches<\/a> in 2021 happened due to compromised credentials. And these attacks are becoming more and more common. In fact, according to the <a href=\"https:\/\/www.securitymagazine.com\/articles\/96667-the-top-data-breaches-of-2021#:~:text=2021%20will%20be%20a%20record,to%201%2C108%20breaches%20in%202020.\" target=\"_blank\" rel=\"noreferrer noopener\">Identity Theft Resource Center<\/a>, the number of breaches in the first nine months of 2021 already exceeded the total number of reported events in 2020 by 17%.&nbsp;<\/p>\n\n\n\n<p>While implementing least privilege in itself doesn\u2019t guarantee your company will be safe from cyberattacks, it does significantly reduce the damage a criminal can inflict.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Streamlined User Experience&nbsp;<\/h3>\n\n\n\n<p>Far from keeping employees from doing their jobs, least privilege can actually improve productivity. Let\u2019s go back to our house sitter example again. If you were the house sitter, would it be easier for your client to hand you one key to the greenhouse, with a map to every plant you need to water and specific instructions, or a large ring of keys that opens many doors to plants scattered throughout the house, and no instructions?&nbsp;<\/p>\n\n\n\n<p>Most of us would choose the former. Having access to only what you need can reduce the amount of noise you have to sift through to carry out a task. Similarly, locking down unnecessary user privileges can make it easier for employees to learn your applications and to do their jobs, when they only have access that is essential to their work.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Easier to Monitor Compliance<\/h3>\n\n\n\n<p>If you don\u2019t decide to use least privilege practices voluntarily, you may ultimately be forced anyway, in order to remain compliant with certain government or industry requirements.&nbsp;<\/p>\n\n\n\n<p>Many governments and organizations require their members to implement least privilege as part of ensuring their data\u2019s safety and security. Having an airtight PoLP strategy already in place makes demonstrating compliance easy, because it gives you a clear way to log and track all privileged account access and activity. Minimizing these privileged users makes for an even simpler, more streamlined compliance log, since fewer privileged users to track means less chance for mistakes to happen.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Implementing Least Privilege&nbsp;<\/h2>\n\n\n\n<p>If least privilege is a foreign concept at your company, implementing it may take an initial investment of time or training. But the increased security and peace of mind are sure to pay dividends in the long run. Our advice? Take things one step at a time.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 1: Audit Current User Privileges&nbsp;<\/h3>\n\n\n\n<p>The first step to least privilege implementation is getting a complete picture of your current users\u2019 privileges. This means auditing the whole system to understand who has what access to which applications, servers, and devices.&nbsp;<\/p>\n\n\n\n<p>Be especially cognizant of privilege creep in this step, which is when an account is granted privileged access, but that access is not taken away once the task is performed. In a complex environment without a cloud-based security software to easily track, provision, and deprovision privileges, it\u2019s highly likely some accounts have access they no longer need.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 2: Remove Unnecessary Privileges and Use Segmentation to Reassign Access<\/h3>\n\n\n\n<p>Once you\u2019ve identified which accounts are over-privileged, it\u2019s time for the hard part: take those privileges away. The easiest way to do this is to revert all accounts back to basic access, and then segment higher-clearance users to quickly get their access back. While this may pose an initial inconvenience for users, it\u2019s the best way to ensure you\u2019ve caught all privilege creep.&nbsp;<\/p>\n\n\n\n<p>With modern user management technology like JumpCloud, you can easily segment user groups based on job role. For example, you can assign higher privilege access to all executive leadership, or enable all users with a certain IT admin clearance level higher access to their applications and resources.&nbsp;<\/p>\n\n\n\n<p>For the highest-clearance superusers, consider privileging these accounts individually instead of assigning batch privileges. For example, an \u201call accountants\u201d group may be able to access payroll and taxes, but only the CFO may need privileged access to the business\u2019s cash flow error spreadsheet.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 3: Default to Least Privilege in Future and Keep Monitoring&nbsp;<\/h3>\n\n\n\n<p>Setting up user groups makes it much easier to onboard new employees into your least privilege organization, but this isn\u2019t a \u201cset it and forget it\u201d process. You must continuously monitor user accounts and access, especially privileged accounts, to ensure you can catch issues before they become big problems. Review activity and access logs at least weekly to check for unusual activity, like failed login attempts or requested changes to access.&nbsp;<\/p>\n\n\n\n<p>You also need to monitor privileges on a larger scale. We recommend performing a least-privilege audit at least quarterly to ensure all accounts have what they need for their current roles, and nothing else. This is particularly important for any employees whose job descriptions may have grown or changed, or who moved to new roles within the organization.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Least Privilege and Cloud Security: the Gold Standard&nbsp;<\/h2>\n\n\n\n<p>A successful PoLP strategy is the perfect balance between security and productivity. Employees have what they need to do their job, with established guardrails in place to reduce the chance of cyberattacks and user error. But the key to least privilege working is constant monitoring, which can represent a significant workload for an already overburdened IT organization. That\u2019s where <a href=\"https:\/\/jumpcloud.com\/blog\/what-cloud-directory\">cloud directory platforms<\/a> like JumpCloud come in.&nbsp;<\/p>\n\n\n\n<p>A modern cloud directory platform offers an efficient, combined approach to least privilege by converging <a href=\"https:\/\/jumpcloud.com\/platform\/cloud-directory\">directory services<\/a>, privileged account management, directory extensions, web app single sign-on (SSO), and multi-factor authentication into one optimized SaaS-based solution.<\/p>\n\n\n\n<p>These platforms offer centralized privileged identities instantly mapped to IT resources like devices, applications, and networks, regardless of platform, provider, location, or protocol. They also leverage multiple protocols such as <a href=\"https:\/\/jumpcloud.com\/blog\/what-is-ldap\">LDAP<\/a>, <a href=\"https:\/\/jumpcloud.com\/blog\/what-is-the-radius-protocol\">RADIUS<\/a>, <a href=\"https:\/\/jumpcloud.com\/blog\/what-is-saml\">SAML<\/a>, and <a href=\"https:\/\/jumpcloud.com\/blog\/scim-provisioning-defined\">SCIM<\/a> so IT admins can seamlessly provision and deprovision, while users have secure, frictionless access to their resources.If you\u2019re interested in learning more about how to implement a least privilege solution, <a href=\"https:\/\/jumpcloud.com\/contact\">drop us a note<\/a>. We\u2019d love to chat about how you can leverage JumpCloud\u2019s Cloud Directory Platform, or try it yourself by <a href=\"https:\/\/console.jumpcloud.com\/signup\" target=\"_blank\" rel=\"noreferrer noopener\">signing up for a free account<\/a>. Your first 10 users and 10 systems are free. If you have any questions, access our in-app chat 24\u00d77 during the first 10 days and a customer success engineer will be there to help.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Discover the principle of least privilege (PoLP), and why implementing least privilege is vital for the security of your business.<\/p>\n","protected":false},"author":158,"featured_media":54373,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"categories":[2337],"tags":[2618,2682,2709,2373,2374],"collection":[2775],"platform":[],"funnel_stage":[3016],"coauthors":[2514],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>What Is Least Privilege and Why Do You Need It? - JumpCloud<\/title>\n<meta name=\"description\" content=\"Discover the principle of least privilege (PoLP), and why implementing least privilege is vital for the security of your business.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/blog\/what-is-least-privilege\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"What Is Least Privilege and Why Do You Need It?\" \/>\n<meta property=\"og:description\" content=\"Discover the principle of least privilege (PoLP), and why implementing least privilege is vital for the security of your business.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/blog\/what-is-least-privilege\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:published_time\" content=\"2022-03-29T19:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-11-17T22:43:40+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/202110-Resource-WB-NavigatingCloudSecurityRiskLandscape-1900x1140-1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1900\" \/>\n\t<meta property=\"og:image:height\" content=\"1140\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Molly Murphy\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Molly Murphy\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-least-privilege#article\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-least-privilege\"},\"author\":{\"name\":\"Molly Murphy\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/848d5076d1ee31d44f3e931246a2e6e4\"},\"headline\":\"What Is Least Privilege and Why Do You Need It?\",\"datePublished\":\"2022-03-29T19:00:00+00:00\",\"dateModified\":\"2022-11-17T22:43:40+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-least-privilege\"},\"wordCount\":1961,\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-least-privilege#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/202110-Resource-WB-NavigatingCloudSecurityRiskLandscape-1900x1140-1.jpg\",\"keywords\":[\"cybersecurity\",\"least privilege\",\"PoLP\",\"security\",\"zero trust\"],\"articleSection\":[\"Remote Work\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-least-privilege\",\"url\":\"https:\/\/jumpcloud.com\/blog\/what-is-least-privilege\",\"name\":\"What Is Least Privilege and Why Do You Need It? - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-least-privilege#primaryimage\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-least-privilege#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/202110-Resource-WB-NavigatingCloudSecurityRiskLandscape-1900x1140-1.jpg\",\"datePublished\":\"2022-03-29T19:00:00+00:00\",\"dateModified\":\"2022-11-17T22:43:40+00:00\",\"description\":\"Discover the principle of least privilege (PoLP), and why implementing least privilege is vital for the security of your business.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-least-privilege#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/blog\/what-is-least-privilege\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-least-privilege#primaryimage\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/202110-Resource-WB-NavigatingCloudSecurityRiskLandscape-1900x1140-1.jpg\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/202110-Resource-WB-NavigatingCloudSecurityRiskLandscape-1900x1140-1.jpg\",\"width\":1900,\"height\":1140,\"caption\":\"Yellow lock in front of a blue and white cloud\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-least-privilege#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"What Is Least Privilege and Why Do You Need It?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/848d5076d1ee31d44f3e931246a2e6e4\",\"name\":\"Molly Murphy\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/image\/875416d4e9feca84c245bb5d57471bab\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/02a040c777bd6af5417a6c723f561b59?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/02a040c777bd6af5417a6c723f561b59?s=96&d=mm&r=g\",\"caption\":\"Molly Murphy\"},\"description\":\"Molly Murphy is a Senior Content Writer at JumpCloud. A self-professed nerd, she loves working on the cutting edge of the latest IT tech. When she's not in the [remote] office, Molly loves traveling, rescuing animals, and growing her all together unhealthy obsession with Harry Potter.\",\"sameAs\":[\"https:\/\/jumpcloud.com\/blog\"]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"What Is Least Privilege and Why Do You Need It? - JumpCloud","description":"Discover the principle of least privilege (PoLP), and why implementing least privilege is vital for the security of your business.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/blog\/what-is-least-privilege","og_locale":"en_US","og_type":"article","og_title":"What Is Least Privilege and Why Do You Need It?","og_description":"Discover the principle of least privilege (PoLP), and why implementing least privilege is vital for the security of your business.","og_url":"https:\/\/jumpcloud.com\/blog\/what-is-least-privilege","og_site_name":"JumpCloud","article_published_time":"2022-03-29T19:00:00+00:00","article_modified_time":"2022-11-17T22:43:40+00:00","og_image":[{"width":1900,"height":1140,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/202110-Resource-WB-NavigatingCloudSecurityRiskLandscape-1900x1140-1.jpg","type":"image\/jpeg"}],"author":"Molly Murphy","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Molly Murphy","Est. reading time":"9 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/jumpcloud.com\/blog\/what-is-least-privilege#article","isPartOf":{"@id":"https:\/\/jumpcloud.com\/blog\/what-is-least-privilege"},"author":{"name":"Molly Murphy","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/848d5076d1ee31d44f3e931246a2e6e4"},"headline":"What Is Least Privilege and Why Do You Need It?","datePublished":"2022-03-29T19:00:00+00:00","dateModified":"2022-11-17T22:43:40+00:00","mainEntityOfPage":{"@id":"https:\/\/jumpcloud.com\/blog\/what-is-least-privilege"},"wordCount":1961,"publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/what-is-least-privilege#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/202110-Resource-WB-NavigatingCloudSecurityRiskLandscape-1900x1140-1.jpg","keywords":["cybersecurity","least privilege","PoLP","security","zero trust"],"articleSection":["Remote Work"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/blog\/what-is-least-privilege","url":"https:\/\/jumpcloud.com\/blog\/what-is-least-privilege","name":"What Is Least Privilege and Why Do You Need It? - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jumpcloud.com\/blog\/what-is-least-privilege#primaryimage"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/what-is-least-privilege#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/202110-Resource-WB-NavigatingCloudSecurityRiskLandscape-1900x1140-1.jpg","datePublished":"2022-03-29T19:00:00+00:00","dateModified":"2022-11-17T22:43:40+00:00","description":"Discover the principle of least privilege (PoLP), and why implementing least privilege is vital for the security of your business.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/blog\/what-is-least-privilege#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/blog\/what-is-least-privilege"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/blog\/what-is-least-privilege#primaryimage","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/202110-Resource-WB-NavigatingCloudSecurityRiskLandscape-1900x1140-1.jpg","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/202110-Resource-WB-NavigatingCloudSecurityRiskLandscape-1900x1140-1.jpg","width":1900,"height":1140,"caption":"Yellow lock in front of a blue and white cloud"},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/blog\/what-is-least-privilege#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"What Is Least Privilege and Why Do You Need It?"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/848d5076d1ee31d44f3e931246a2e6e4","name":"Molly Murphy","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/image\/875416d4e9feca84c245bb5d57471bab","url":"https:\/\/secure.gravatar.com\/avatar\/02a040c777bd6af5417a6c723f561b59?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/02a040c777bd6af5417a6c723f561b59?s=96&d=mm&r=g","caption":"Molly Murphy"},"description":"Molly Murphy is a Senior Content Writer at JumpCloud. A self-professed nerd, she loves working on the cutting edge of the latest IT tech. When she's not in the [remote] office, Molly loves traveling, rescuing animals, and growing her all together unhealthy obsession with Harry Potter.","sameAs":["https:\/\/jumpcloud.com\/blog"]}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/61246"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/158"}],"replies":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/comments?post=61246"}],"version-history":[{"count":3,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/61246\/revisions"}],"predecessor-version":[{"id":72357,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/61246\/revisions\/72357"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media\/54373"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=61246"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/categories?post=61246"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/tags?post=61246"},{"taxonomy":"collection","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/collection?post=61246"},{"taxonomy":"platform","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/platform?post=61246"},{"taxonomy":"funnel_stage","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/funnel_stage?post=61246"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=61246"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}