Granting access to a user based upon how high up he is in an organization violates "the principle of least privileges."
As the principle of least privileges states that a person should be given only those privileges that are needed or are necessary to perform a specific job or task and nothing more.
The principle of least privileges states that you assign users the minimum set of privileges which they require to do their jobs, according to their roles.
The principle of least privilege prevents the spread of malware on your network. An administrator or superuser with access to a lot of other network resources and infrastructure could potentially end up spreading malware to all those other systems which he gets access to.
Hence, if the organization grants access to a user based upon how high up he is then the organization violates the principle of least privileges.
To learn more about the least privileges here:
brainly.com/question/27034248
#SPJ4
