Least privilege in practice
Give people and systems only the access they need, only for as long as they need it, and prove it with reviews.
- Level
- Intermediate
- Length
- About 30 minutes
- Contents
- 3 lessons · 1 video · final exam
- Status
- Published · updated 1 Oct 2026
Skills you'll practise
- Explain least privilege and why it limits damage.
- Find over-privileged accounts in a review.
- Recommend narrower roles and time-limited access.
- Document approvals and exceptions.
Course outline
- 1.Least privilege in practiceVideo · 3 min
- 2.Smallest access, shortest timeLesson · 8 min
- 3.Service accounts and shared accountsLesson · 8 min
- 4.Just-in-time and time-bound accessLesson · 8 min
- 5.Least privilege in practice: knowledge checkKnowledge check · 17 questions
- 6.Least privilege in practice: practical exerciseKnowledge check · 1 question
- 7.Final exam7 questions · passing it completes the course, so people who already know the material can test out
Sources it draws on
The lessons and questions are written from these references, so learners can go back to the original.
- NIST SP 800-53 AC-6 least privilege, control description
- Microsoft Learn: Best practices for Microsoft Entra roles
See it with your own jobs and topics
Tell us about your team and we'll walk you through setup, from choosing jobs to your first skills check.