Concept 2 min
Least Privilege / Permissioning
Marketing agent does not read payroll.
In one sentence
Each agent accesses only the minimum required for its function. Marketing agent does not read payroll. Reduces the blast radius of errors and prompt injection.
Before
Agent with broad access
What it does
Only the minimum required for the function
After
Reduced blast radius
Example
The letter agent reads field reports and basic records. It does not read sponsor financial data, does not read health information, and does not have sending credentials.
If a report contains malicious text and the agent is tricked, the most it can do is write a bad file to a folder.
In practice
- Written agent × access matrix. Start by denying everything and grant only the minimum.
- Revoke access not used in 90 days.
- Review when the agent gets a new task, because that is when scope grows without anyone noticing.
How to make it tangible
An agent × access matrix, with the minimum required and everything else revoked.
Connects with
Translated from Portuguese with AI assistance.