Security Aspect - Understanding principle of least privilage