Privileged access management through ‘least privilege’ principle