Episode 238 - GluuFederation/identerati-office-hours GitHub Wiki

Title: Have you considered "less" privilege?

Channels

Description

"Least privilege" is something every identity team works towards, but hardly any reach it. Strict implementations backfire: teams get blocked, or work around permissions just to do their jobs. Agents make it even harder, since they might be acting on their own or on behalf of users. I want to talk about a two-tier approach: apply least privilege where it's worth the cost, and "less privilege" everywhere else. That means coarse boundaries, removing unused access, keeping identities to a minimum, and making them visible and tracked. Simple security beats complex security.

Homework

Takeaways

  • ⚡
  • ⚡
  • ⚡
  • ⚡

Livestream Archive