The practice of deliberately granting an <a href="/en/glossary/core-concepts/ai-agent/">AI Agent</a> only the minimum set of permissions needed for its current task, rather than granting broad access far beyond actual need for convenience, so the potential impact of an error stays as contained as possible.