What is the principle of least privilege?

Every user, process and service gets only the access it needs, for only as long as it needs it. It limits the damage from compromised accounts and mistakes.