Access only to the specific data relevant to your role, even if you have the technical permissions to access more. About what data you can see, not what actions you can take. Distinct from least privilege, which is about permissions.
Want to actually apply concepts like this instead of just reading definitions?
Practice free on Zamlom