WEBVTT

00:00:00.000 --> 00:00:06.000
Does everyone helping with a website need admin access?

00:00:06.000 --> 00:00:13.000
Least privilege means granting the permissions needed for the task.

00:00:13.000 --> 00:00:18.000
Match access to the actual work.
6 practical access checks.

00:00:18.000 --> 00:00:30.000
Name the task first
Updating a paragraph and managing all users require different powers.
Content task · User management · Actual requirement

00:00:30.000 --> 00:00:42.000
Choose a suitable role
Check what the role permits before assigning it.
Role description · Allowed actions · Relevant resources

00:00:42.000 --> 00:00:54.000
Use separate named accounts
Individual accounts make access easier to review and remove.
Named person · Separate account · Clear owner

00:00:54.000 --> 00:01:06.000
Limit temporary access
Agree when project access should be reviewed or removed.
Project purpose · Review date · Responsible owner

00:01:06.000 --> 00:01:18.000
Check connected services too
Hosting, domains and integrations have their own permissions.
Hosting access · Domain access · Connected services

00:01:18.000 --> 00:01:30.000
Review when the work changes
Remove permissions that are no longer needed.
Changed responsibilities · Finished project · Current access list

00:01:30.000 --> 00:01:39.000
Your checklist
Name the task first · Choose a suitable role · Use separate named accounts · Limit temporary access · Check connected services too · Review when the work changes

00:01:39.000 --> 00:01:47.000
Keep access useful, limited and reviewed.
jerseyweb.je