Skip to content
Free public beta until December 4, 2026: every course is open, no card needed. After that, the first chapter of each course stays free and full access is a one-time $39 ($19 for up to 100 founding members chosen for helpful feedback). Your progress is kept. How the beta works

least privilege

Giving each device only the access its job needs, and nothing more.

The principle of least privilege grants every identity the smallest set of permissions that lets it do its job, so a stolen credential exposes as little as possible.

Examples

  • Sensor gh-c3 may write only gh1/gh-c3/telemetry/# and gh1/gh-c3/status and read only gh1/gh-c3/cmd/#, so if it is stolen it cannot switch off another bench's heater.

See also

access control list authorization topic tree
Read the full section →