What is least privilege principle?
In the world of security, there is a simple but deadly mistake: giving someone "the keys to the whole building" when they only need to "clean the lobby."
The Principle of Least Privilege (PoLP) is the practice of limiting access rights for users, accounts, and computing processes to only the bare minimum permissions they need to perform their authorized tasks. In short: if you don't need it to do your job, you don't get it.
PoLP is about reducing the "Blast Radius." If a developer’s account is compromised:
Without PoLP: The hacker has DBA access and deletes the entire production database.
With PoLP: The hacker only has SELECT access to three specific tables. The damage is contained.
Imagine you have an application that generates monthly reports.
The Lazy Way: You grant the application the DBA role because "it makes everything work" and avoids "insufficient privilege" errors.
The Least Privilege Way: 1. You identify exactly which 5 tables the report needs.
2. You grant SELECT only on those 5 tables.
3. You grant CREATE SESSION so it can log in, and nothing else.
If PoLP is so great, why isn't everyone doing it?
Convenience: It takes time to figure out exactly which privileges a user needs. It's much faster to just grant ALL PRIVILEGES.
Fear of Breaking Things: DBAs are often afraid that if they revoke a privilege, the application will crash.
Entitlement Creep: Over time, users change jobs but keep their old permissions, eventually accumulating "God-like" powers.
In a modern Oracle environment, we use "Privilege Analysis" to find out what users are actually using versus what they have.
Stop using built-in roles: Avoid DBA, RESOURCE, and CONNECT where possible. Create custom roles.
Use Public-Sector constraints: Ensure the PUBLIC user has zero permissions (Oracle has been "hardening" this by default in recent versions).
Audit and Revoke: Use the DBMS_PRIVILEGE_CAPTURE package. You run it for a week, it records every privilege the user actually used, and then you can safely revoke everything else.
Start at Zero: New users should start with nothing.
Granular Grants: Grant SELECT on table_name, not SELECT ANY TABLE.
Just-In-Time Access: If someone needs high-level access for a specific task, grant it temporarily and revoke it immediately after.
Least Privilege isn't about "not trusting" your employees; it's about protecting them. By limiting what an account can do, you ensure that a single mistake or a stolen password doesn't turn into a company-ending disaster.