The concept that users should have only the access needed is known as

A authorization and authentication policy

B $O$ separation of duties

C principle of least privilege

D denial of service