A company gives users adequate data access permissions to allow them to fulfill their duties but nothing more. Which of the following concepts best describes this practice?

Active Directory is a directory service used for managing users, computers, and other network resources, but it is a tool, not the concept describing this access practice.

Hierarchical access refers to a structured permission model where access rights might cascade down a hierarchy, but it doesn't specifically define the "nothing more" aspect.

Zero Trust is a broader security model that assumes no implicit trust and verifies every access request, but "least privilege" is a fundamental principle within a Zero Trust architecture, not the overarching description of granting "nothing more."

The principle of least privilege dictates that users, programs, or processes should be given only the essential permissions or access rights required to perform their authorized functions and nothing more. This practice enhances security by limiting potential damage if an account is compromised or misused.