authorized privilege

A set of permissions, capabilities, or access rights formally granted by an organizational authority to a user, process, or role, scoped to what is necessary for that principal to perform assigned functions. It is distinguished from unauthorized or incidentally acquired access in that it reflects a deliberate policy decision — typically documented through access authorization processes, role definitions, or least-privilege analysis — about what elevated actions a given subject may legitimately take. In practice, standards bodies use the concept as a risk object: separation of duties addresses the potential for abuse of authorized privileges and helps to reduce the risk of malevolent activity without collusion (NIST SP 800-53 Rev. 5, AC-5), and the principle of least privilege is applied with the goal of authorized privileges no higher than necessary to accomplish required organizational missions or business functions (NIST SP 800-171 Rev. 2, control 3.1.5), meaning that "authorized privilege" names the bounded, sanctioned entitlement set that controls must constrain and audit rather than any specific privilege type.

Advisory only. A term this product ships is defined by an authority document, not by a search result.