An individual should only be given the least amount of privilege necessary to do their job. Granting more access than is necessary can lead to unnecessary security violations. James Antonakos of the National Cybersecurity Institute explains.