Least Privilege

Begin with the business task

Identify which resources the workflow actually needs. Use the narrowest supported access model confirmed by the implementation and reviewed by your administrator.

Review the boundary

An inventory of chosen libraries is not itself an enforced library boundary. If the approved model uses site-level access, consider every library in that site.

Separate roles and revisit access

Restrict credential access to authorized connection owners. Review temporary setup privileges independently from runtime permissions. Reassess access when a workflow, owner, or destination changes.

This is an access planning approach, not a claim that the product enforces a particular permission model.