Least privilege principle

don't give more permissions than a user needs