To safely delegate administration tasks, which approach should you take?

• A. Employ the principle of least privilege
• B. Grant admin rights to all
• C. Disable user accounts after shift
• D. Use password vault only

Answer: (A)

Least privilege is the approach to safely delegate administration tasks. By giving each administrator only the minimum permissions needed to perform their duties, you reduce the risk of accidental or intentional misconfigurations, limit the potential impact if credentials are compromised, and make accountability and auditing easier. If a task requires higher access, grant it temporarily or use predefined roles rather than broad, permanent rights. The other options don’t provide proper access control: granting admin rights to everyone creates unnecessary risk; simply disabling user accounts after a shift doesn’t limit what a user can do while active; relying on a password vault alone protects credentials but doesn’t enforce permission boundaries.