Answer Description

The Principal of Least Privilege means users and user accounts should be given the most restrictive permissions possible to complete the tasks necessary. For example, if a file is used by a Finance team to track company revenue a user in the marketing department should not have access to the file. SAPM is not a real acronym, an Entry Control Roster refers to a list of authorized people for a physical area.

Wikipedia

In information security, computer science, and other fields, the principle of least privilege (PoLP), also known as the principle of minimal privilege or the principle of least authority, requires that in a particular abstraction layer of a computing environment, every module (such as a process, a user, or a program, depending on the subject) must be able to access only the information and resources that are necessary for its legitimate purpose.