When employing a zero trust strategy at an enterprise, cybersecurity teams must consider instituting a least privilege policy — providing only strictly necessary access credentials to employees and revoking them when no longer needed.
https://www.securitymagazine.com/articles/96336-zero-trust-and-the-role-of-least-privilege-for-securing-cloud-workloads