Workflow Automation Maintenance: 2026 Essential Guide

Workflow Automation Maintenance: 2026 Essential Guide
Author Profile
Sam Na

Remote work systems writer focused on practical automation reviews, workflow maintenance, job search organization, and dependable productivity routines for distributed professionals.

Contact: seungeunisfree@gmail.com

Published and Updated: July 17, 2026

How to maintain workflow automations is a question I ask after the exciting setup stage is over. An automation may work perfectly on the day I build it, but remote work does not stay still. App permissions expire. Folder names change. Project stages change. Team members leave. Form fields are edited. Task boards are reorganized. A workflow that once saved attention can quietly become inaccurate, noisy, or unnecessary.

I do not review automations because I expect every workflow to fail. I review them because successful automation changes the way I work. Once a manual step disappears, I may stop noticing the process behind it. That is convenient when the workflow is healthy, but dangerous when a failure remains invisible.

For remote workers, freelancers, virtual assistants, project coordinators, and job seekers, a broken automation rarely looks dramatic at first. It may look like one missing reminder, one duplicated task, one file in the wrong folder, one outdated status, or one recruiter email that never became a follow-up item. Small errors can stay hidden because the automation was supposed to remove the need to check every step manually.

A useful automation should reduce manual work without removing my ability to see whether the workflow is still accurate, necessary, and safe.

That is why I treat automation review as part of the workflow itself. I keep a simple inventory, inspect run history when needed, test important connections, check whether outputs still appear in the right place, and remove workflows that no longer earn their maintenance cost.

Official automation platforms provide tools for this kind of review. Zapier documents run history and troubleshooting for errored workflows. Microsoft Power Automate provides monitoring, failure notification, and troubleshooting guidance. Make provides scenario history that can show module inputs, outputs, and unexpected behavior. These tools differ in interface, but the practical lesson is similar: an automation needs observable results and a place to investigate what happened.

Review before trust becomes assumption.

I check whether an automation still runs, still creates the right result, still uses appropriate access, and still solves a current problem.

This guide explains how I review my automations so they keep helping instead of breaking. It covers workflow inventory, usefulness checks, execution history, failure signals, permissions, ownership, maintenance routines, retirement decisions, and common workflow automation mistakes that appear after the initial setup.

Why Working Automations Still Need Regular Review

A successful run does not always mean a useful result

An automation can run without reporting a technical error and still create the wrong outcome. It may copy an outdated field, create a task in an abandoned project board, save a file in an old folder, calculate a follow-up from the wrong date, or send a notification to a channel I no longer monitor.

This distinction matters because technical success and workflow success are not identical. Technical success means the steps completed. Workflow success means the output helped the real work move forward correctly.

For example, a job application workflow may create a follow-up reminder exactly as configured. But if my current follow-up process has changed, the reminder timing may no longer make sense. A client intake automation may create a project folder successfully, but the folder may use an outdated naming convention. The tool completed its instructions, yet the instructions no longer match the work.

Remote work systems change gradually

Most workflow changes do not happen in one dramatic moment. They happen gradually. I add a tracker field. I rename a folder. I move from one task app to another. A client requests a different communication channel. A team changes its meeting process. A job search moves from broad applications to interview follow-ups.

Because the changes are gradual, an automation can become outdated without appearing obviously broken. It may still run, but the result becomes less useful every week. This is one reason I review workflows in context instead of checking only whether they are turned on.

I ask whether the automation still matches the current manual process. If I were doing the task by hand today, would I perform the same steps? If not, the automation needs an update or retirement.

Silent failures are more dangerous than visible failures

A visible error is inconvenient, but it gives me something to investigate. A silent failure is harder because I may assume the task was handled. A trigger may not fire. A filter may skip an item. A connection may lose permission. An expected field may arrive empty. A destination record may no longer exist.

The automation may not create a clear alert for every unexpected result. Even when a platform sends failure notifications, I still need to know where those notifications appear and who is responsible for acting on them.

I reduce silent failure risk by keeping important outcomes visible. A submitted job application should appear in the tracker. A client intake should create a review item in a place I already check. A file workflow should leave a clear record or notification. Visibility is part of maintenance.

Maintenance protects confidence in the system

Once I stop trusting an automation, I begin checking its work manually. Then the workflow creates the worst of both worlds: I still maintain the automation, but I also repeat the manual task because I am uncertain.

Regular review prevents this erosion of confidence. I do not need to watch every run. I need enough visibility to confirm that the workflow remains dependable. A quick review of recent runs, outputs, errors, and current purpose can restore trust.

If I cannot restore trust easily, I simplify or remove the automation. A manual process I understand can be better than an automated process I do not trust.

Technically successful

The workflow completes its configured steps without reporting an error.

Practically useful

The result still supports the current task, destination, timing, and review habit.

Visible enough

I can confirm that an important item arrived without repeating the entire manual process.

Trusted enough

I understand the workflow well enough to rely on it without constantly checking every step.

Key Takeaway

Working automations need review because tools, processes, destinations, and priorities change. A completed run matters only when it still produces a useful and visible result.

How I Build a Simple Automation Inventory

I give every workflow a clear name

Automation maintenance becomes difficult when workflows have vague names. A list filled with names such as “Test,” “New Flow,” “Copy,” or “Automation 3” does not tell me what the system does. I have to open every workflow to understand it.

I prefer a name that describes the trigger and the result. “Submitted application creates follow-up task” is clearer than “Job Zap.” “Client intake creates private review item” is clearer than “Form workflow.” “Interview event creates preparation note” is clearer than “Calendar automation.”

A clear name makes review faster. It also makes deletion safer because I can understand the purpose before I turn anything off.

I record the source, destination, and owner

For each important automation, I record where the workflow starts, where the result appears, and who owns the connected accounts. This can be a simple note rather than a complicated database.

The source might be email, a calendar, a form, a tracker, a folder, or a project board. The destination might be a task manager, notes app, spreadsheet, reminder system, folder, or messaging tool. The owner may be me, a client, a team account, or another person responsible for the workflow.

Ownership matters because a connection can fail when an account is removed, a password changes, a subscription ends, a permission is revoked, or a person leaves a project. If I do not know which account supports the automation, troubleshooting becomes slower.

I record the purpose in one sentence

Every workflow should have a reason to exist. I record that reason in one sentence. The sentence does not describe the technical steps. It describes the work problem being solved.

For example: “This workflow prevents submitted job applications from losing their follow-up date.” Another example: “This workflow makes new client intake visible before I send a response.” Another might be: “This workflow prepares a note so I do not search for interview details at the last minute.”

If I cannot explain the current purpose, the automation may no longer be necessary. The purpose sentence becomes a simple retirement test.

I note the review frequency and risk level

Not every automation needs the same review schedule. A workflow that creates a weekly personal reminder may need less attention than one that moves client files or creates shared tasks. I match the review frequency to the importance and risk of the result.

A low-risk personal workflow may be reviewed monthly or when something feels wrong. A workflow affecting client communication, job opportunities, shared project status, sensitive files, or payments deserves more frequent observation.

I do not use a complicated scoring system. I simply mark whether a workflow is low, medium, or high attention. The label reminds me where a silent error would matter most.

1
Name the workflow with its trigger and useful result so its purpose is visible without opening it.
2
Record the source app, destination app, connected account owner, and place where the output is reviewed.
3
Describe the real work problem the automation solves in one plain-language sentence.
4
Choose a review frequency based on how much harm, delay, or confusion a silent failure could create.
My minimum inventory record

Workflow name, current purpose, trigger, result, connected accounts, output location, owner, risk level, and next review date are enough for most small remote work automations.

Key Takeaway

A simple automation inventory makes maintenance visible. I record what each workflow does, why it exists, where its result appears, who owns it, and when it should be reviewed.

How I Check Whether an Automation Still Helps

I compare the automation with the current manual process

My first usefulness check is simple: if I completed this task manually today, would I still follow the same steps? This question reveals automations that are technically active but operationally outdated.

Perhaps I no longer track applications in the same spreadsheet. Perhaps client intake now requires approval before a folder is created. Perhaps a meeting note belongs in a different workspace. Perhaps the follow-up timing has changed. Perhaps a project status no longer uses the label that triggers the workflow.

If the manual process has changed, the automation should change with it. I do not preserve an old workflow merely because it took time to build.

I check whether the automation saves attention

An automation should reduce repeated effort, missed steps, or mental load. If it creates alerts I ignore, records I never use, or tasks I immediately delete, it is no longer helping.

I look at the result from the reader’s perspective. When the output appears, does it make the next action clearer? Does it reduce searching? Does it preserve useful context? Does it prevent something from being forgotten?

A workflow does not need to save a large amount of time. It can still be valuable if it prevents one important follow-up from disappearing. But it should create real value, not decorative activity.

I calculate the hidden maintenance cost

Automation has a maintenance cost even when it is free to run. I spend attention reviewing errors, updating fields, reconnecting accounts, changing filters, explaining the workflow, and checking whether the output is correct.

If a workflow saves one minute per month but requires repeated troubleshooting, it may not be worthwhile. If it handles a small task reliably every day with little maintenance, it may remain valuable.

I compare the benefit with the maintenance burden. When the burden becomes larger than the benefit, I simplify, pause, or remove the workflow.

I check whether I still trust the output

Trust is a practical signal. If I always check the original app because I do not trust the automated result, the workflow may not be doing its job. I may need better visibility, clearer field mapping, a simpler trigger, or a different output.

Sometimes the automation is reliable but the review design is weak. The result may appear in a place I rarely check. Moving it to a trusted destination can restore usefulness without rebuilding the entire workflow.

Other times, the workflow has become too complicated to trust. In that case, I return to a smaller version with fewer steps and clearer outputs.

Still current

The workflow matches the way I would perform the task manually today.

Still useful

The output prevents a missed step, saves attention, reduces searching, or clarifies the next action.

Still affordable

The time, attention, subscription use, and troubleshooting burden remain lower than the benefit.

Still trusted

I can rely on the output without rebuilding the manual task merely to confirm it.

✓
Does the trigger still represent the correct moment for the workflow to begin?
✓
Does the result still appear in the app, folder, tracker, or task list where I currently work?
✓
Does the automation reduce attention or risk instead of creating alerts, duplicates, or cleanup?
✓
Would I notice soon enough if the workflow stopped producing the expected result?
Key Takeaway

An automation should remain current, useful, affordable to maintain, and trustworthy. If one of those conditions disappears, I update, simplify, pause, or remove it.

How I Inspect Failures, Skipped Runs, and Wrong Outputs

I begin with run history instead of guessing

When an automation behaves unexpectedly, I do not change several settings immediately. I begin with the platform’s run history, execution history, activity log, or equivalent monitoring area. I want to see whether the workflow started, which steps completed, where it stopped, and what information each step received.

This separates different types of problems. The trigger may never have fired. The trigger may have fired, but a filter skipped the item. An action may have failed. The action may have succeeded with the wrong field. The destination may have rejected the record. The workflow may have created the result correctly, but in a location I did not expect.

Changing settings before identifying the failure point can create a second problem. Run history helps me investigate one step at a time.

I distinguish errors from skipped runs

An error means the workflow attempted a step and could not complete it as expected. A skipped run may mean the trigger condition, filter, path, or schedule did not qualify. The solution depends on which situation occurred.

If the workflow errored, I inspect the failed step, connection, required field, destination, and error message. If it skipped the item, I inspect the trigger data and conditions. A filter may be too narrow. A label may have changed. A field may use a different value. A schedule may not match the time I expected.

This distinction prevents me from treating every missing result as a broken connection.

I inspect inputs and outputs around the failed step

A workflow often fails because the input is different from what I expected. A date may be empty. A status may use different capitalization. A record may have been deleted. A folder may have been renamed. A link may point to an item that no longer exists. A field may now contain multiple values instead of one.

I check the information entering the step and the result leaving it. This reveals whether the problem comes from the source data, the workflow mapping, or the destination app.

For remote job search, I may discover that a follow-up date was missing from one tracker entry. For client work, I may find that a form question was renamed and the automation still expects the old field. For file organization, I may find that the destination folder no longer exists.

I replay only after correcting the cause

Some automation tools allow failed runs to be replayed. Replay can be useful, but I do not use it as the first solution. Replaying the same run without correcting the cause may create another failure or duplicate output.

I first identify the failure, correct the trigger, mapping, field, permission, or destination, and then decide whether replay is safe. I check whether a partial output already exists. A workflow may have completed earlier steps before failing later. Replaying the whole run could duplicate those earlier results.

For an important workflow, I test with a safe item before replaying many failed records.

1
Open the workflow history and confirm whether the trigger ran, the item was skipped, or a later step failed.
2
Locate the first unexpected step instead of changing several workflow settings at once.
3
Inspect the step’s inputs, mapped fields, outputs, connected account, and destination record.
4
Correct the underlying cause and check for partial outputs before replaying or manually recovering the item.
A useful warning sign

If you keep replaying failed runs without understanding the original failure, pause the workflow. Repeated retries can create duplicate tasks, messages, files, or tracker records.

Key Takeaway

I troubleshoot from evidence. I inspect run history, identify the first unexpected step, review inputs and outputs, correct the cause, and replay only after checking for duplicates.

How I Review Permissions, Owners, and Connected Accounts

I confirm which account owns each connection

An automation may depend on several accounts even when the workflow appears simple. One account watches email, another creates tasks, another accesses a shared folder, and another writes to a tracker. If one account loses access, the workflow may fail.

I confirm which account supports each connection and whether that account is still active. This is especially important for freelance projects, client workspaces, shared team tools, and temporary collaborations.

A workflow should not depend silently on an account belonging to someone who has left the project. Ownership should be understandable before a problem appears.

I check whether the access is still necessary

Permissions can remain active long after the workflow changes. An automation may still have access to folders, calendars, forms, messages, or project spaces that it no longer needs.

I review the current purpose and compare it with the current access. If the automation only creates a reminder, it may not need broad access to unrelated records. If a project has ended, the workflow may no longer need access to the client workspace.

I prefer the minimum practical access needed for the current function. Narrower access makes the workflow easier to understand and reduces the amount of information exposed if the connection behaves unexpectedly.

I inspect personal, client, and team boundaries

Remote workers may use one automation platform across personal productivity, job search, freelance work, and team projects. This convenience can blur boundaries if connected accounts are not reviewed carefully.

I check that a personal job search workflow does not write into a client workspace. I check that a client form does not create tasks in an unrelated team board. I check that private notes do not move into shared calendars or channels. I check that a personal account is not the only owner of a business-critical workflow.

Clear boundaries protect privacy and reduce confusion about who can see, edit, or act on the output.

I plan what happens when an owner changes

Automation ownership can become a hidden operational risk. If the owner leaves, closes an account, loses a subscription, or revokes access, the workflow may stop. A small personal automation may simply be rebuilt. A client or team workflow needs a clearer transition plan.

For shared workflows, I record who should take ownership and where the workflow is documented. I avoid making a critical process dependent on an account that no one else can access or understand.

Maintenance includes continuity. The workflow should remain understandable even when the person who built it is unavailable.

Connection owner

Confirm which person or account authorizes every source and destination app.

Current access

Remove connections or permissions that are broader than the workflow currently requires.

Workspace boundary

Keep personal, job search, client, and team information in the appropriate connected spaces.

Ownership continuity

Document important shared workflows so they do not depend on one unavailable account or person.

My access review rule

Every active connection should belong to a known owner, serve a current purpose, use appropriate access, and send information only into an expected workspace.

Key Takeaway

I review owners and permissions because an automation is only as dependable as the accounts, access, and workspace boundaries supporting it.

My Practical Automation Checklist for Work

My quick weekly review

I do not perform a deep technical audit every week. My weekly review is designed to catch obvious signs of trouble in important workflows. I look for missing outputs, unexpected duplicates, repeated failures, unusual delays, or notifications that I have started ignoring.

I focus on automations connected to current priorities. During an active job search, application tracking and follow-up workflows deserve attention. During a client project, intake, file, status, and deadline workflows matter more. The review follows the work rather than treating every automation as equally urgent.

A quick check can prevent a small problem from becoming a lost opportunity or confusing backlog.

My monthly workflow review

The monthly review looks beyond immediate failures. I ask whether each active automation still solves a real problem. I review current purpose, recent use, connected tools, destinations, notifications, and ownership.

I look for automations that have not run because the process changed. I look for workflows that run often but create outputs I no longer use. I look for duplicates created by overlapping systems. I also check whether a manual checklist would now be simpler than the automation.

This review is where I pause, simplify, rename, document, or retire workflows.

My review after a tool or process change

I do not wait for the next scheduled review when a connected tool changes. A renamed field, moved folder, updated form, new project board, changed status, or replaced account can affect the workflow immediately.

After a change, I identify every automation that depends on the modified app or process. Then I test the most important workflow with safe sample data. This is faster than waiting for a real item to fail.

Process changes deserve the same attention as software changes. If I change the way I follow up with recruiters or approve new clients, the supporting automation should be reviewed.

My retirement decision

Deleting an automation is not a failure. A workflow may have completed its purpose. A project may be over. A better tool may now handle the task. The manual process may have become simpler. The workflow may no longer run often enough to justify maintenance.

Before retirement, I check whether any other workflow depends on its output. I record any useful settings or lessons. Then I pause the workflow before deleting it when possible. A short pause lets me confirm that nothing important is missing.

A healthy automation system becomes smaller as well as larger. Removal keeps the active workflows easier to understand.

✓
Confirm that important workflows produced recent expected outputs in the correct destination.
✓
Review failed, stopped, skipped, delayed, or unusually repeated runs before trusting the next run.
✓
Check whether triggers, filters, field names, folders, statuses, and destinations still match the current process.
✓
Confirm that connected accounts remain active and owned by the correct person or organization.
✓
Review whether the workflow still uses an appropriate amount of access for its current purpose.
✓
Remove notification channels that repeat the same alert without improving action or awareness.
✓
Test important workflows with safe sample data after changing an app, form, field, folder, or process.
✓
Pause or retire workflows that no longer save attention, reduce risk, or support a current priority.
Keep, fix, simplify, or retire.

Every review should end with one clear decision. An automation should not remain active merely because no one has decided what to do with it.

Key Takeaway

My automation checklist combines quick output checks, monthly usefulness reviews, immediate testing after changes, and deliberate retirement of workflows that no longer help.

Workflow Automation Mistakes That Appear Over Time

Forgetting why the workflow exists

An automation becomes difficult to maintain when its purpose is forgotten. I may see that it creates a record or sends a reminder, but I may not remember which problem it was designed to solve.

Without a purpose, I cannot judge whether the output is still useful. I may keep an unnecessary workflow because I am afraid to remove it. Clear naming and a one-sentence purpose prevent this kind of automation archaeology.

If no current person can explain the benefit, I pause the workflow and observe what changes.

Adding fixes without simplifying the original workflow

A common maintenance mistake is adding step after step to handle every problem. One error creates a filter. Another creates a delay. Another creates a branch. Another creates a second notification. Eventually the workflow becomes harder to understand than the manual process.

When fixes accumulate, I stop patching and review the original design. The trigger may be too broad. The source data may be inconsistent. The workflow may be trying to handle too many cases. A smaller redesign can be safer than another condition.

Maintenance should include subtraction. I remove unnecessary steps before adding new ones.

Ignoring low-frequency automations

An automation that runs rarely can be easy to forget. It may support quarterly reporting, annual renewals, occasional client onboarding, portfolio updates, or interview scheduling. Because it does not run often, problems may remain hidden until the moment the workflow becomes important.

I include low-frequency but high-impact workflows in the inventory. Before the expected event, I test the workflow or review its connected accounts and destinations.

Frequency and importance are different. A workflow can run rarely and still deserve careful maintenance.

Keeping workflows active after the work ends

Old automations create clutter and risk. A finished client workflow may still monitor a folder. A completed job search campaign may still create weekly tasks. An abandoned project board may still receive records. A former team channel may still receive notifications.

I review automations when a project ends, a role changes, a client relationship closes, or a search phase finishes. This is a natural time to pause, archive, transfer, or delete the workflow.

Ending the automation is part of ending the project cleanly.

Purpose drift

The workflow remains active even though no one remembers the current problem it solves.

Patch accumulation

New filters, branches, delays, and exceptions hide a design that should be simplified.

Rare-run neglect

An important workflow is ignored because it runs infrequently and fails only when needed most.

Expired workflow

The project or routine has ended, but the automation continues monitoring, copying, or notifying.

A useful warning sign

If you are afraid to pause an automation because you do not know what depends on it, document the workflow before changing it. Unclear dependency is itself a maintenance problem.

Key Takeaway

Long-term automation mistakes include forgotten purpose, accumulated patches, neglected rare workflows, and active connections that outlive the work they supported.

Frequently Asked Questions

Q1. How often should I review workflow automations?

Review important outputs weekly, perform a broader usefulness and access review monthly, and test affected workflows whenever an app, field, form, folder, status, account, or manual process changes.

Q2. What should an automation checklist for work include?

Check the current purpose, recent runs, expected outputs, triggers, filters, field mapping, destinations, notifications, connected accounts, ownership, permissions, exceptions, and retirement status.

Q3. How do I know whether an automation has silently failed?

Use visible outputs, review run history, monitor failure alerts, and compare expected items with actual results. Important workflows should leave a result in a place you already check.

Q4. Should I replay a failed automation run?

Replay only after identifying and correcting the cause. Check whether earlier steps created partial outputs first, because replaying may produce duplicate tasks, files, messages, or records.

Q5. When should I delete an automation?

Consider retirement when the original problem no longer exists, the workflow creates unused output, the manual process is now simpler, maintenance costs exceed the benefit, or the project has ended.

Q6. What are common workflow automation mistakes?

Common mistakes include unclear ownership, outdated triggers, broken connections, duplicate outputs, excessive notifications, broad permissions, undocumented dependencies, accumulated patches, and workflows that remain active after their purpose ends.

Q7. How do I maintain a low-frequency automation?

Keep it in the automation inventory, record when it is expected to run, and test its accounts, trigger, destination, and sample output before the next important event.

Q8. What is the simplest automation maintenance rule?

Every active automation should have a current purpose, known owner, visible result, appropriate access, understandable design, and a clear review or retirement date.

Conclusion

Workflow automation maintenance is not a separate technical project for me. It is part of keeping remote work clear. An automation should not become invisible simply because it once worked. It should remain understandable enough to review, update, simplify, or remove.

I begin with a small inventory. I record the workflow name, purpose, source, destination, owner, connected accounts, output location, risk level, and next review date. This simple record prevents active workflows from becoming hidden dependencies.

I also separate technical success from practical usefulness. A workflow can complete every step and still create the wrong result for the current process. I compare the automation with the way I would perform the task manually today. If the process has changed, the automation should change too.

When something goes wrong, I investigate run history instead of guessing. I check whether the trigger fired, whether a filter skipped the item, which step first behaved unexpectedly, what inputs arrived, and what outputs were created. I correct the cause before replaying failed work.

Permissions and ownership are part of maintenance as well. Every connection should belong to a known account, use appropriate access, and send information into the expected personal, client, or team workspace. Old permissions and abandoned integrations should not remain active merely because they are easy to forget.

The final decision is always one of four actions: keep, fix, simplify, or retire. A healthy automation system does not grow forever. It becomes clearer as old workflows leave and useful workflows become easier to trust.

Next Step

Choose your three most important automations. For each one, confirm the current purpose, inspect a recent result, check the connected account, and decide whether to keep, fix, simplify, or retire it.

About the Author
Sam Na

Sam Na writes about remote work clarity, workflow automation maintenance, job search organization, no-code systems, app connections, follow-up routines, and practical processes for distributed professionals. The focus is simple: help people build automations that remain understandable, observable, useful, and easy to remove when the work changes.

Contact: seungeunisfree@gmail.com

Please read this with your own workflow in mind

This article is written for general informational purposes. Automation maintenance, monitoring features, app permissions, data retention, account ownership, security requirements, employer policies, client expectations, and recovery options can vary depending on the tools, plan, role, organization, country, and workflow involved. Before making important security, privacy, legal, financial, employment-related, or client-facing decisions, it is helpful to compare these ideas with current official product documentation, workplace guidance, and trusted professional advice that fits your situation.

References
Zapier Help — View and Manage Your Zap History

Official Zapier Help documentation explaining how Zap history records workflow runs and supports task-usage review and troubleshooting.

https://help.zapier.com/hc/en-us/articles/8496291148685-View-and-manage-your-Zap-history

Microsoft Learn — Monitor Your Flows

Official Microsoft guidance describing monitoring, alerting, analytics, and troubleshooting options for Power Automate workflows.

https://learn.microsoft.com/en-us/power-automate/guidance/coding-guidelines/monitoring-and-alerting

Make Help Center — Scenario History

Official Make documentation explaining how scenario history can be used to inspect processed data, module outputs, logs, and unexpected workflow behavior.

https://help.make.com/scenario-history

NIST CSRC — Least Privilege

Official NIST glossary resource defining the principle of restricting access privileges to the minimum necessary for an assigned task or system function.

https://csrc.nist.gov/glossary/term/least_privilege

Previous Post Next Post