administrative privilege
163506·updated Aug 30, 2026No definition recorded.
Composition
Source
types include individual, group, temporary, system, guest, anonymous, emergency, developer, and service. Users who require administrative privileges onthe sentence this term was read in
generalized from a web lookup of the quoted expression at proposal time Verdict: term of art.
- Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations
- Best Practices for Privileged User PIV Authentication | NIST
- Election Security Spotlight – Principle of Least Privilege
- AC-2 - NIST 800-53 r5 Control Explorer - GRC Academy
A definition generalized from search results is a draft to react to, not provenance. Confirm it against an authority document before this term is verified.
A web lookup ran when this term was proposed
A level of access permission granted to an account that authorizes the holder to perform control, configuration, and administration functions on a system — such as installing software, modifying security settings, managing other accounts, or altering system behavior — that are withheld from standard users. Users who require administrative privileges on system accounts receive additional scrutiny by personnel responsible for approving such accounts and privileged access. Because IT personnel with administrative privileges can affect the security posture of an entire system, the field treats the expression as an authorization category subject to least-privilege controls, heightened authentication requirements, and continuous monitoring; administrative privileges are often required for malware to execute, making their governance a primary attack-surface concern. Users requiring administrative privileges on system accounts receive additional scrutiny by organizational personnel responsible for approving such accounts and privileged access, including system owner, mission or business owner, senior agency information security officer, or senior agency official for privacy.
Advisory only. A term this product ships is defined by an authority document, not by a search result.
Proposed during multiword review of this document in the CKI mapping queue.
Attested in
No recorded attestations. They are written when an MWE tagging stage is completed, stamped with the pack version and the document’s digest.