Answer
Give the minimum permissions needed for the person's task and reserve administrative rights for people responsible for registrations, approvals, or account security.
Explanation
Least privilege limits accidental or unauthorised changes to compliance data.