Least privilege
Security principle: give every user/service exactly as little access as needed to do its job.
The database user for a web app shouldn't be a superuser. The service account for logging shouldn't be able to modify config. Limits the blast radius when something is compromised.