向用户提供完成其工作所需的最低功能和模块访问权限，并在不需要时尽早收回。

Give users the minimum amount of access to functions and modules that allow them to do their jobs, and take away that privilege at the earliest convenient time.

youdao

Condition指定如有例外，就让权限过期无效，可能需要重新进行协商(比如，如果信用卡过期了，就会收回播放视频的所有权限)。

Conditions specify exceptions that, if true, expire the permissions, and renegotiation may be required (for example, if the credit card expires, then all permissions are withdrawn to play the video).

youdao

如果您为他们提供了其他权限，将这些额外的权限限制在其安全概要中，然后在完成工作后收回这些权限。

If you have to give them additional privileges, compartmentalize that extra boost to their security profile, then take that privilege away as soon as they're done working.

youdao