Field Scenario

A small business customer wants every employee to have full administrative access to their systems, reasoning that it’s simpler to manage.

What You Actually Explain

• Explain the principle of least privilege and why broad, unnecessary access represents genuine risk
• Recommend granting access based on what each role actually needs
• Discuss multi-factor authentication as an additional, genuinely valuable layer of protection
• Balance security recommendations with the customer’s actual practical management needs