Which term represents the practice of giving employees only those permissions necessary to perform their specific role within an organization?

Integrity validation refers to verifying that data has not been altered or corrupted, not to controlling permission scope.

Due diligence is the practice of exercising reasonable care and research before making a security decision, not a permission-assignment model.

Need to know is specifically about restricting access to classified or sensitive information based on operational necessity, whereas least privilege is the broader permission-minimization principle applied to system roles and access rights.

Least privilege is the formal security principle that restricts user access rights to only what is strictly necessary for their role. It limits the blast radius of compromised accounts and reduces insider threat risk by ensuring no user has excessive permissions beyond their job function.