One doc tagged with "throttles"

What is the approach to API Authorisation to validate access is segregated to minimum scope and limited to least privileged access?