What does the principle of least privilege state?

A. A user or program should have unrestricted access to the entire system.
B. A user or program should not have any privileges at all.
C. A user or program should be granted remote access to all programs.
D. A user or program should have the least privileges that are necessary for them to work.