non-privileged account

An access credential (account or role) granted to a user or process that carries only the permissions necessary for ordinary, non-administrative work—explicitly excluding elevated rights such as system administration, security-function execution, or root access. It is the contrasting class to a privileged account within the least-privilege model: unlike privileged accounts, non-privileged accounts do not have elevated privileges, meaning they do not have access to privileged systems and data. In practice, standards mandate that even users who *also* hold privileged accounts must use non-privileged accounts or roles when accessing nonsecurity functions, and conduct general computing activities, such as internet browsing, email, and productivity suite use, from the user's primary, non-privileged account (CIS Controls). The concept extends to roles as well as accounts: the inclusion of roles addresses situations where organizations implement access control policies such as role-based access control and where a change of role provides the same degree of assurance in the change of access authorizations for both the user and all processes acting on behalf of the user as would be provided

Advisory only. A term this product ships is defined by an authority document, not by a search result.