Which of the following security concepts establishes the notion that a user should only be given sufficient access to the resources they need to perform their job function?

Which of the following security concepts establishes the notion that a user should only be given sufficient access to the resources they need to perform their job function?

A.
Deny all

B.
Allow all

C.
Most privilege

D.
Least privilege