Giving the minimum necessary.
THE PRINCIPLE
Each person has the lowest level of access that allows their work.
WHY
A compromised account with limited access does limited damage.
And mistakes are contained.
WHAT LEVELS TYPICALLY EXIST
- Administrator: everything
- Editor or manager: content and operations
- Contributor: limited
- Viewer: read only
WHO SHOULD BE ADMINISTRATOR
As few people as possible.
WHAT PEOPLE USUALLY GET
Administrator, because it is simplest.
That is the mistake.
FOR CONTENT WORK
An editor account is sufficient.
FOR A CONTRACTOR
The minimum for the task, removed when the work ends.
WHAT TO REVIEW
Whether anyone has more access than they need.
HOW TO DECIDE
What would they be unable to do with less?
If nothing, reduce it.
WHAT TO DOCUMENT
Who has what level, and why.
WHAT TO CHECK QUARTERLY
The full list of accounts and their levels.
