Which of the following should be used to ensure a user has the permissions needed to effectively do an assigned job role?

Implementing least privilege ensures users have only the necessary permissions to perform their job functions, and no more. This directly addresses the need for users to effectively do their assigned role while minimizing security risks. Changing default passwords is a general security best practice but doesn't specifically grant or manage user permissions. Enforcing baseline configurations ensures systems are set up securely but doesn't directly dictate individual user access rights. Applying network segmentation separates network areas, which is a security control, but it doesn't manage user-level permissions for specific job roles.