---
title: Least privilege
canonical: https://wpsecurityninja.com/dictionary/least-privilege/
---
# Least privilege

Least privilege means each user and integration gets only the access required for their job, nothing more.

[Full guide](https://wpsecurityninja.com/wordpress-user-roles/)

## Why it matters for WordPress

Every Administrator account is full keys to the kingdom. Freelancers, interns, and old agency logins with admin rights turn a small phishing win into a full takeover. Least privilege shrinks that blast radius before anything goes wrong.

## How it shows up in practice

- Five Administrators when one break-glass account would do
- Authors who somehow can install plugins
- Shared “team” admin accounts nobody wants to rotate
- Application passwords created with more power than the integration needs

## What to do

1. Map people to default roles (Editor, Author, Shop Manager) before creating more Admins.
2. Use a separate admin account for break-glass work; day-to-day on a lower role when possible.
3. Remove users who left the project.
4. Audit capabilities added by membership or ecommerce plugins.

Related guide: [WordPress user roles](https://wpsecurityninja.com/wordpress-user-roles/).