home/glossary/access privilege

access privilege

MWEid 163496·updated Aug 30, 2026
verified

No definition recorded.

Composition

access+privilege

Source

document
NIST SP 800-171 Rev 3 - Protecting CUI in Nonfederal Systems
found in
proposed during MWE review
element
e0163
proposed by
dorianc@moxywolf.com
discovery
ManualCuration
Organizations may choose to define access privileges or other attributes by account, type of account, or a combination of both. Other attributes required for authorizing access include restrictions on the time of day, day of the week, and point of origin. When defining other system account attributes, organizations considerthe sentence this term was read in
Where the definition came fromawaiting curator confirmation

generalized from a web lookup of the quoted expression at proposal time Verdict: term of art.

A definition generalized from search results is a draft to react to, not provenance. Confirm it against an authority document before this term is verified.

A web lookup ran when this term was proposed

"Access privileges" in information security and compliance refers to the specific permissions, rights, and authorizations granted to a user account (or class of account) that define what system resources, functions, and data that account is permitted to access or act upon. The term is used in the context of the principle of least privilege, by which a system restricts the access privileges of users to the minimum necessary to accomplish assigned tasks. As used in the quoted NIST authority document (AC-2, Account Management), the specification of access privileges reflects the requirements in other controls in the security plan and is defined per account or account type. The phrase is a recognized term of art: it is not merely the sum of "access" + "privileges" used loosely, but rather a specific, recurring construct in access-control frameworks governing what an authenticated identity is authorized to do within a system.

Advisory only. A term this product ships is defined by an authority document, not by a search result.

Proposed during multiword review of this document in the CKI mapping queue.

Attested in

No recorded attestations. They are written when an MWE tagging stage is completed, stamped with the pack version and the document’s digest.

Classifications

No parent term linked
MWE terms inherit classifications from a parent verb or noun. This MWE has no parent linkage; it is classified only by term-type and status.

Framework definitions

No framework-specific definitions
This term has not been bound to a regulatory framework with a sense definition.

Outgoing relationships

No outgoing triples
This term is not the subject of any RDF-style relationship yet.

Incoming relationships

No incoming triples
No other term currently asserts a relationship to this one.