Privilege creep,” the gradual accumulation of unnecessary access rights by employees, is a growing but often invisible risk.