SB.9.014 Least Privilege
Individuals receive only the minimum number of authorisations required for their role and purpose in the processing activities.
Authorisations are only given for the period the activities take place.
Preferably these are given based on a role and not attached to individuals.
IST/SOLL control is performed and approved by proces owner.