The principle of least privilege refers to the security objective of granting users only those accesses they need to perform their job duties. Which action is inconsistent with the principle of least privilege?
a. Authorization creep
b. Re-authorization when employees change positions
c. Users have little access to systems
d. Users have significant access to systems