Assigning users to privileged roles that they don't need unnecessarily increases your attack surface. Also, it's easier for ...