What are the principles of least privilege in a multi-tenant environment, and how would you enforce them?
