Broken Function Level Authorization is an authorization vulnerability in which insufficient access controls allow users to access administrative or privileged functions intended for authorized roles, thereby violating the principle of least privilege within an application's permission model.