From 81292a5f5816d96fdd171b800dbb06c3ea53192d Mon Sep 17 00:00:00 2001
From: fria <138676274+friadev@users.noreply.github.com>
Date: Thu, 23 Oct 2025 17:52:35 -0500
Subject: [PATCH] add admin account info

---
 blog/posts/zero-trust.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/blog/posts/zero-trust.md b/blog/posts/zero-trust.md
index 5f525c6b..2d81eaba 100644
--- a/blog/posts/zero-trust.md
+++ b/blog/posts/zero-trust.md
@@ -121,6 +121,8 @@ In order to verify who is allowed to access what, you need to segment everything
 
 From now on, every person must explicitly verify who they are using their own credentials. You don't want to be able to access anyone else's data and you don't want them accessing your data either.
 
+In line with the principle of least privilege, set everyone who doesn't need administrator access as a standard user. This will prevent them from having more access to the system than needed. You can even make separate administrator and standard accounts for yourself and only use the administrator one when you need it.
+
 Make sure your router has an administrator password set and don't give it to everyone, just people who need to administer it.
 
 #### Two-Factor Authentication