home/glossary/elevated privilege

elevated privilege

MWEid 163582·updated Sep 1, 2026
verified

No definition recorded.

Composition

elevated+privilege

Source

document
NIST SP 800-171 Rev 3 - Protecting CUI in Nonfederal Systems
found in
proposed during MWE review
element
e0206
proposed by
dorianc@moxywolf.com
discovery
ManualCuration
refer to accounts that are granted elevated privileges to access resources (includingthe sentence this term was read in
Where the definition came fromawaiting curator confirmation

generalized from a web lookup of the quoted expression at proposal time Verdict: term of art.

A definition generalized from search results is a draft to react to, not provenance. Confirm it against an authority document before this term is verified.

A web lookup ran when this term was proposed

A level of access permission — assigned to an account, process, or identity — that exceeds the baseline rights granted to ordinary users, authorizing operations (such as modifying system configuration, accessing restricted resources, or executing security-critical functions) that are withheld from standard accounts. Privileged accounts are those "granted elevated privileges to access resources (including security functions or security-relevant information) that are otherwise restricted for non-privileged accounts," per NIST SP 800-171r3; at the network level, NIST SP 800-50r1 defines this as a condition typically allocated to system administrators, network administrators, DBAs, and others responsible for system/application control, monitoring, or administration. The field uses the expression both as a property of legitimately authorized accounts and as a target state in adversarial contexts: software applications or processes may need to execute with elevated privileges to perform required functions, but this can indirectly provide users with greater privileges than those formally assigned to them; conversely, elevated privileges are important to bypass safety mechanisms of industrial controllers, and can also be used to bypass access controls or security mechanisms more broadly.

Advisory only. A term this product ships is defined by an authority document, not by a search result.

Proposed during multiword review of this document in the CKI mapping queue.

Attested in

No recorded attestations. They are written when an MWE tagging stage is completed, stamped with the pack version and the document’s digest.

Classifications

No parent term linked
MWE terms inherit classifications from a parent verb or noun. This MWE has no parent linkage; it is classified only by term-type and status.

Framework definitions

No framework-specific definitions
This term has not been bound to a regulatory framework with a sense definition.

Outgoing relationships

No outgoing triples
This term is not the subject of any RDF-style relationship yet.

Incoming relationships

No incoming triples
No other term currently asserts a relationship to this one.