Can you apply the principle of least privilege?

Yes. The principle of least privilege gives users, services, and APIs only the permissions needed to do their job. It reduces the impact of mistakes or compromised credentials and is applied through roles, scopes, account separation, and periodic access reviews.