elevated privilege
163582·updated Sep 1, 2026No definition recorded.
Composition
Source
refer to accounts that are granted elevated privileges to access resources (includingthe sentence this term was read in
generalized from a web lookup of the quoted expression at proposal time Verdict: term of art.
- NIST Special Publication 800 NIST SP 800-171r3
- privileged network account - Glossary | CSRC
- AC-6(8): Privilege Levels for Code Execution - CSF Tools
- Cyber-attack TTP analysis for EPES systems
A definition generalized from search results is a draft to react to, not provenance. Confirm it against an authority document before this term is verified.
A web lookup ran when this term was proposed
A level of access permission — assigned to an account, process, or identity — that exceeds the baseline rights granted to ordinary users, authorizing operations (such as modifying system configuration, accessing restricted resources, or executing security-critical functions) that are withheld from standard accounts. Privileged accounts are those "granted elevated privileges to access resources (including security functions or security-relevant information) that are otherwise restricted for non-privileged accounts," per NIST SP 800-171r3; at the network level, NIST SP 800-50r1 defines this as a condition typically allocated to system administrators, network administrators, DBAs, and others responsible for system/application control, monitoring, or administration. The field uses the expression both as a property of legitimately authorized accounts and as a target state in adversarial contexts: software applications or processes may need to execute with elevated privileges to perform required functions, but this can indirectly provide users with greater privileges than those formally assigned to them; conversely, elevated privileges are important to bypass safety mechanisms of industrial controllers, and can also be used to bypass access controls or security mechanisms more broadly.
Advisory only. A term this product ships is defined by an authority document, not by a search result.
Proposed during multiword review of this document in the CKI mapping queue.
Attested in
No recorded attestations. They are written when an MWE tagging stage is completed, stamped with the pack version and the document’s digest.