The principle known as______ in access control means that each user should be given only the minimal amount of privileges necessary for that person to perform his job function.