What is least privilege?
Quick answer
Least privilege is the rule that every person, account or AI tool should get only the access its job requires, and no more. For an AI assistant that means connecting only the apps it needs, preferring read access, and requiring approval before it sends, buys or deletes anything.
Last updated
Take the free module →Module 10 of the free Claude Jump Start course, about 8 minutes. No account needed.
Updated · By Robert Breen
Why it matters for a small business
AI tools are getting more reach. A connector can search your Drive, Gmail and Calendar, and an always-on agent can keep working between chats. The more it can touch, the more a wrong answer, a poisoned document or a mistaken click can do. Least privilege keeps the damage small by deciding access on purpose instead of accepting every default.
In practice it is a handful of choices: connect one app at a time, turn tools on per chat when the product allows it, give read-only access to start, and set approval rules for actions. It goes with a human in the loop and a short approved AI tools list.
Least privilege for common AI setups
| Setup | Start with | Add only when needed |
|---|---|---|
| Claude connectors | Connect Google Drive and switch it on in the one chat that needs it | Gmail or Calendar for a task that really uses them |
| ChatGPT dot or other background agent | Read-only access and ask before taking action | Permission to act, for steps you have watched work |
| Shared ChatGPT login | Memory off, training off | Memory on a personal login you review |
| Team accounts | One approved account with an owner | More seats, with the same settings |
Product screens and plans change. Confirm the settings in your own account.
In a real lesson: Connect Claude to Google Drive, Gmail and Google Calendar
In the free Connect Claude to Drive, Gmail and Calendar lesson, Bright Path Landscaping, a made-up company, connects each app once, then switches connectors on per chat: in a new chat you click the plus button, then Connectors, and each one has its own switch for that chat only.
That is least privilege in one screen. A chat about the price sheet needs Drive. It does not need Gmail, so Gmail stays off for that chat.
Try this lesson free or read the step-by-step guide.
Common confusions
Least privilege vs trust
It is not a statement that the tool is bad. Even a trustworthy tool can misread an instruction, so you limit what a mistake can reach.
Least privilege vs permissions you click through
A sign-in screen that asks for several permissions is not least privilege by itself. The skill is reading what is asked and declining what the job does not need.
Tips
- Read each permission screen before you click Allow, and note what the app can see afterward.
- Review connected apps once a month and remove the ones you stopped using.
- Give a new automation or agent read access for its first weeks, then widen it.
Related terms
More AI basics terms
Where you use it: free lessons
- Connect Claude to Google Drive, Gmail and Google Calendar (Claude, 8 min)
- Get a Morning Invoice Summary in Slack using ChatGPT Dots (ChatGPT, 4 min)
- ChatGPT: Keep Client Data Safe, Set Up Your Team's Data Controls in 10 Minutes (ChatGPT, 10 min)
Frequently asked questions
- Does least privilege slow my team down?
- Slightly at first. Setup takes a few extra clicks, but it means fewer surprises and a short answer when a client asks what the AI tool can see.
- Who should decide what a tool can access?
- One named owner, usually the person who owns your AI policy, with a short written list of what each tool is allowed to touch.
- Is this the same as zero trust?
- They are related ideas. Least privilege is about how much access you grant. Zero trust is a wider security approach that also checks every request. For a small office, start with least privilege.