home/glossary/elevated privilege

elevated privilege

MWEid 163582·updated Sep 1, 2026
verified

No definition recorded.

Composition

elevated+privilege

Source

document
NIST SP 800-171 Rev 3 - Protecting CUI in Nonfederal Systems
found in
proposed during MWE review
element
e0206
proposed by
dorianc@moxywolf.com
discovery
ManualCuration
refer to accounts that are granted elevated privileges to access resources (includingthe sentence this term was read in
Where the definition came fromawaiting curator confirmation

generalized from a web lookup of the quoted expression at proposal time Verdict: term of art.

A definition generalized from search results is a draft to react to, not provenance. Confirm it against an authority document before this term is verified.

A web lookup ran when this term was proposed

A level of access rights granted to an account, process, or role that exceeds those of a standard user — specifically, rights to perform security-sensitive or administratively consequential actions such as modifying system configuration, managing other accounts, or accessing otherwise restricted resources. As NIST SP 800-171r3 states, such accounts are "granted elevated privileges to access resources (including security functions or security-relevant information) that are otherwise restricted for non-privileged accounts." In practice, the field uses "elevated privilege" as a relative, comparative descriptor: it characterizes any permission level that stands above an established baseline (typically a standard or least-privilege account), encompassing capabilities such as changing security and configuration settings, adding or deleting other user accounts, and installing or disabling software and hardware. The concept anchors core access-control disciplines — least privilege, privileged access management, and separation of duties — and is the governing criterion for deciding which accounts require heightened controls such as MFA, session logging, and periodic review; NIST SP 1800-18

Advisory only. A term this product ships is defined by an authority document, not by a search result.

Proposed during multiword review of this document in the CKI mapping queue.

Attested in

No recorded attestations. They are written when an MWE tagging stage is completed, stamped with the pack version and the document’s digest.

Classifications

No parent term linked
MWE terms inherit classifications from a parent verb or noun. This MWE has no parent linkage; it is classified only by term-type and status.

Framework definitions

No framework-specific definitions
This term has not been bound to a regulatory framework with a sense definition.

Outgoing relationships

No outgoing triples
This term is not the subject of any RDF-style relationship yet.

Incoming relationships

No incoming triples
No other term currently asserts a relationship to this one.