CCAK: Certificate of Cloud Auditing Knowledge

Role-based access control restricts production access to users assigned authorized roles. Applying least privilege and limiting role membership to personnel who need access helps keep the number of authorized users appropriately small. (learn.microsoft.com)