A platform team runs a Claude-based internal agent for IT operations. It has tools for reading tickets, restarting services, rotating credentials and deleting virtual machines. Usage data shows the help-desk role only reads tickets and restarts a small set of non-production services. The team wants to cut risk before rolling it out to all help-desk staff. What should they do first?

Answer: C — Give the role a configuration with only ticket reading and restarts scoped to approved non-production services

Least privilege removes capabilities the role doesn't need and narrows the ones it does, eliminating the attack surface. Confirmations (a) and audit hooks (b) are compensating or detective controls around privileges that shouldn't exist for this role. A prompt rule (d) is probabilistic enforcement of a hard boundary.