Each program and user of a computer system should operate with the bare minimum privileges necessary to function properly.Reduces risks by containing damages.