In information security and computer science, the principle of least privilege (PoLP), principle of minimal privilege (PoMP), or principle of least authority (PoLA) requires that, in a particular abstraction layer of a computing environment, every module (such as a process, a user, or a program, depending on the subject) must be able to access only the information and resources that are necessary for its legitimate purpose.