UC8 On Premise Application to Cloud Application - Control Measures
<<Control Measure>> Allow permissions only on a least privilege bases i.e. deny by default