non-privileged user

A category of system principal whose access rights are bounded to standard, everyday functions and explicitly exclude the elevated capabilities — such as security-relevant operations, administrative configuration, or system-control functions — that require formal authorization to exercise. The distinguishing feature is not the absence of any access, but the absence of *elevated* access: nonprivileged users hold only the baseline entitlements that ordinary task performance demands, in contrast to privileged users who are authorized (and therefore trusted) to perform functions ordinary users are not permitted to perform. Across NIST SP 800-53, SP 800-171, and related federal standards, the expression anchors access-control requirements — particularly least-privilege controls — that prohibit such users from executing privileged functions, mandate separate accounts when the same individual holds both roles, and identify security-sensitive resources that must be shielded from them.

Advisory only. A term this product ships is defined by an authority document, not by a search result.