non-privileged access
163594·updated Sep 1, 2026No definition recorded.
Composition
Source
, non-the sentence this term was read in
generalized from a web lookup of the quoted expression at proposal time Verdict: compositional.
- Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations
- SP_800-53_v5_1_XML.xml
- NIST Cybersecurity White Paper csrc.nist.gov Best Practices for
A definition generalized from search results is a draft to react to, not provenance. Confirm it against an authority document before this term is verified.
A web lookup ran when this term was proposed
A category of system access rights in which the account or role carries only standard user permissions — no administrative, security-configuration, or elevated-execution capabilities. Its distinguishing attribute is the *absence* of privilege: it cannot alter security controls, modify other users' access, execute privileged functions, or change system configuration in ways that are reserved for administrative accounts. In practice, standards bodies use it in two related ways: (1) as the normal operating posture that even administrators must drop to when performing routine, non-security work (enforcing least-privilege separation of duties), and (2) as the baseline authorization level against which privileged access is contrasted when classifying account types and defining access authorizations.
Advisory only. A term this product ships is defined by an authority document, not by a search result.
Proposed during multiword review of this document in the CKI mapping queue.
Attested in
No recorded attestations. They are written when an MWE tagging stage is completed, stamped with the pack version and the document’s digest.