The more access users have to company data, the more vulnerable that data is in the event of a breach. To limit your company's risks, users should have the least privilege they need to do their jobs.