What requirement in the Access Control section of the NIST SP 800-171 2nd revision requires employing the principle of least privilege?
The requirement is 3.1.5 from the Access Control section of the SP 800-171
That requirement is 3.1.5.