Module 2 challenge — Question 7

A cybersecurity team member is responsible for providing users secure access to a company’s systems. The team member provides each user with access to only the resources needed to complete their job, and no other resources. What security best practice is the analyst using?