non-privileged account

A managed user or system account credential whose permissions are explicitly bounded to ordinary, non-administrative tasks — it cannot invoke security functions, modify system configuration, or access restricted data without a separate elevation step. As defined by NIST SP 800-53 (AC-6(2)) and NIST SP 800-171 (3.1.6), privileged accounts are granted elevated privileges to access resources — including security functions or security-relevant information — that are otherwise restricted for non-privileged accounts; a non-privileged account is therefore the contrasting account type that operates below that threshold. The field uses the term to enforce the principle of least privilege through dual-account practice: privileged users are required to use separate non-privileged accounts for routine tasks unrelated to system or security administration, and general computing activities — such as internet browsing, email, and productivity suite use — are conducted from the user's primary, non-privileged account (CIS Controls). The term encompasses any account type that sits below the privileged threshold — standard user accounts and guest accounts are considered non-privileged, since they are given limited access to systems and data — and applies equally to role-based constructs: the inclusion of roles addresses situations where a change of role provides the same degree of assurance in the change of access authorizations as would be provided by a change between a privileged and non-privileged account.

Advisory only. A term this product ships is defined by an authority document, not by a search result.