Least privilege / privilege escalation

Least privilege is the security principle that a user, account, or process should be granted only the minimum access necessary to do its job, nothing more. Privilege escalation is what happens when an attacker (or a compromised account) manages to gain access beyond what was originally granted, often by exploiting a flaw to move from limited permissions to broader ones.