Need to know

Focuses on limiting access to information based on job relevance. Least privilege is broader and applies not only to data, but also to system functions, network paths, APIs, automation tokens, and administrative tools.