Stick to the basic principle of least privilege and grant customers only the bare minimum amount of accessibility and permissions important to perform their jobs. restricting access to important capabilities and data https://digitalhutline.com/cybersecurity/what-is-url-phishing-and-how-to-avoid-it/