Answer 1

well thats actually a security question i think

basically means give the user the least amount of privilege necessary to do their job.

for example if you have an employee whose job is to input data into a database, you dont need to give them more access than they need. so like they dont need access to other employee accounts, or things like that. he only needs permission to modify the database.