{
 "id": "https://redfinchadvisory.com/lexicon/least-privilege-for-ai",
 "slug": "least-privilege-for-ai",
 "prefLabel": "Least privilege for AI",
 "altLabel": [
  "Least privilege",
  "Scoped access"
 ],
 "hiddenLabel": [],
 "definition": "A rule that an AI system or agent gets only the permissions it strictly needs for the task, and nothing more.",
 "scopeNote": "",
 "tier": "reference",
 "group": "Autonomy and identity",
 "broader": [],
 "narrower": [],
 "related": [
  {
   "id": "https://redfinchadvisory.com/lexicon/guardrail",
   "type": "related"
  },
  {
   "id": "https://redfinchadvisory.com/lexicon/agent-identity",
   "type": "related"
  }
 ],
 "links": [
  {
   "id": "https://redfinchadvisory.com/lexicon/agent-gateway",
   "label": "enforced by",
   "direction": "out"
  },
  {
   "id": "https://redfinchadvisory.com/lexicon/data-exfiltration",
   "label": "is best stopped by",
   "direction": "in"
  }
 ],
 "modified": "2026-10-21",
 "markdown": "https://redfinchadvisory.com/lexicon/least-privilege-for-ai.md",
 "inScheme": {
  "id": "https://redfinchadvisory.com/lexicon",
  "version": "1.0",
  "currentAsOf": "2026-10-21"
 }
}