You should grant users access only to the resources that they require.

您应该只授予用户访问所需资源的权限。