An ISCM capability that ensures that people have the privileges necessary (and only those necessary) to perform their duties, to limit access to that which is necessary.
Sources:
NISTIR 8011 Vol. 1
See Capability, Privilege and Account Management.
Sources:
NISTIR 8011 Vol. 1
under Manage Privileges