What Is the Principle of ‘Least Privilege’ in RBAC?

The principle of 'least privilege' in Role-Based Access Control (RBAC) dictates that every user, role, or address should only be granted the minimum set of permissions necessary to perform their required tasks, and nothing more. For example, a 'Fee Collector' role should only have permission to withdraw collected fees, not to mint new tokens or upgrade the contract.

This minimizes the potential damage from a compromised key, as an attacker will only gain access to a limited, non-critical set of functions.