Overprivileged Identity

Access control

An overprivileged identity has more permissions than necessary to perform its tasks. This can happen due to improper role and access assignments or unchecked access escalation.

Overprivileged identities pose a significant security threat as they can access sensitive systems and data beyond their intended scope. If compromised, these identities allow attackers to perform malicious actions like data exfiltration or lateral movement within the network.

High, especially in large environments with frequent role changes and inadequate access reviews.

High, as overprivileged identities can lead to significant system compromise if misused.

Continuously monitor and audit permissions, flagging overprivileged identities. Implement least privilege access principles and ensure access levels are limited to the minimum required for functionality. Enforce Zero Trust validation for every consumer and any action performed by these identities to limit the risk of privilege abuse.

110