{"id":1055,"date":"2024-07-16T20:07:43","date_gmt":"2024-07-16T20:07:43","guid":{"rendered":"https:\/\/www.tarleton.edu\/security-controls-catalog\/?page_id=1055"},"modified":"2026-08-24T21:46:48","modified_gmt":"2026-08-24T21:46:48","slug":"ac-6-least-privilege","status":"publish","type":"page","link":"https:\/\/www.tarleton.edu\/security-controls-catalog\/access-control-ac\/ac-6-least-privilege\/","title":{"rendered":"AC-6: Least Privilege"},"content":{"rendered":"\n<h1 class=\"wp-block-heading has-large-font-size\">AC-6: Least Privilege <\/h1>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-size:clamp(14px, 0.875rem + ((1vw - 3.2px) * 0.294), 16px);\"><strong>NIST Baseline: &nbsp;<\/strong>Moderate&nbsp;<\/h2>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-size:clamp(14px, 0.875rem + ((1vw - 3.2px) * 0.294), 16px);\"><strong>DIR Required By: &nbsp;<\/strong>07\/20\/2023 &nbsp;&nbsp;<\/h2>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-size:clamp(14px, 0.875rem + ((1vw - 3.2px) * 0.294), 16px);\"><strong>Review Date: \u00a0<\/strong>08\/24\/2026<\/h2>\n\n\n\n<ol start=\"1\" class=\"wp-block-list\">\n<li>Accounts are created with a baseline appropriate for the category of account (Domain users receive a minimum level of access to information resources approved for all employees). All subsequent access granted is based on the minimum degree necessary for the account to complete necessary tasks and job duties; as determined by the information resource custodian. Privileges should be escalated only when necessary to accomplish assigned tasks.&nbsp;&nbsp;<\/li>\n<\/ol>\n\n\n\n<ol start=\"2\" class=\"wp-block-list\">\n<li>Confidential information shall be accessible only to authorized users.&nbsp;<\/li>\n<\/ol>\n\n\n\n<ol start=\"3\" class=\"wp-block-list\">\n<li>Third parties or other state organizations are, at a minimum, required to follow the same conditions and policies of least privilege and confidentiality if Tarleton State University provides access to information resources.&nbsp;<\/li>\n<\/ol>\n\n\n\n<hr class=\"wp-block-separator aligncenter has-text-color has-tarleton-purple-color has-alpha-channel-opacity has-tarleton-purple-background-color has-background is-style-wide\"\/>\n\n\n\n<h3 class=\"wp-block-heading has-medium-font-size\"><strong>References\/Additional Resources <\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">None.&nbsp; See any applicable internal procedures.&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>AC-6: Least Privilege NIST Baseline: &nbsp;Moderate&nbsp; DIR Required By: &nbsp;07\/20\/2023 &nbsp;&nbsp; Review Date: \u00a008\/24\/2026 References\/Additional Resources None.&nbsp; See any applicable internal procedures.&nbsp;<\/p>\n","protected":false},"author":1,"featured_media":580,"parent":871,"menu_order":8,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"inline_featured_image":false,"advgb_blocks_editor_width":"","advgb_blocks_columns_visual_guide":"","footnotes":""},"class_list":["post-1055","page","type-page","status-publish","has-post-thumbnail","hentry"],"acf":[],"coauthors":[],"author_meta":{"author_link":"https:\/\/www.tarleton.edu\/security-controls-catalog\/author\/brian-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-3\/","display_name":"brian"},"relative_dates":{"created":"Posted 2 years ago","modified":"Updated 2 weeks ago"},"absolute_dates":{"created":"Posted on July 16, 2024","modified":"Updated on August 24, 2026"},"absolute_dates_time":{"created":"Posted on July 16, 2024 8:07 pm","modified":"Updated on August 24, 2026 9:46 pm"},"featured_img_caption":"","featured_img":false,"series_order":"","_links":{"self":[{"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/pages\/1055","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/comments?post=1055"}],"version-history":[{"count":1,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/pages\/1055\/revisions"}],"predecessor-version":[{"id":2693,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/pages\/1055\/revisions\/2693"}],"up":[{"embeddable":true,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/pages\/871"}],"wp:attachment":[{"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/media?parent=1055"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}