Layer 5 · Session 46 · Planned · Not validated
Least privilege in practice
An authoring contract, not a completed lesson.
Status: Planned. Validation and personal walkthrough not started. Not published.
Purpose
Introduce least privilege in practice because the workload needs a new decision or capability.
Learning objectives
- Explain the model in workload context.
- Compare responsibility and cost tradeoffs.
- Apply it through a reproducible CLI-first exercise.
- Verify and clean up.
Concepts planned
Definition, architecture connection, purposeful visual, prediction, comparison, and fact/recommendation labels.
Expected lab outcome
One observable, independently verified change with cost, security, reliability, and operational effects.
Prerequisites and continuity
Previous: Session 45 — Users, groups, service principals, and workload identities. Next: Session 47 — Azure Key Vault.
Author notes
- Check official Microsoft docs.
- Add explicit scope, variables, verification, cleanup, and cost.
- Execute in disposable resources and record environment/date.
- Test failure paths and update architecture.
Do not teach from this page yet. It stays unhydrated until tested.