Develop a privileged user policy to define or assess policies, strategies, and technologies used to control, monitor, and secure elevated access to critical. Enforce the principle of least privilege for both human and machine accounts. restrict account creation and permission levels to the exact.