An ISCM capability that ensures that people have the privileges necessary (and only those necessary) to perform their duties, to limit access to that which is necessary.
Sources:
NISTIR 8011 Vol. 1
under Capability, Privilege and Account Management
See Capability, Privilege and Account Management.
Sources:
NISTIR 8011 Vol. 1