privileged function
163584·updated Sep 1, 2026No definition recorded.
Composition
Source
perform privileged functions such as executing commands that could modify system behavior. Restrictingthe sentence this term was read in
generalized from a web lookup of the quoted expression at proposal time Verdict: term of art.
- AC-6(10): Prohibit Non-privileged Users from Executing Privileged Functions - CSF Tools
- AC.L2-3.1.7 Privileged Functions - DIB SCC CyberAssist
- 3.1.7: Prevent non-privileged users from executing privileged functions and capture the execution of such functions in audit logs - CSF Tools
A definition generalized from search results is a draft to react to, not provenance. Confirm it against an authority document before this term is verified.
A web lookup ran when this term was proposed
An operation or capability within a system to which the delegation of authority — and therefore security consequence — is attached, meaning its execution can affect the security posture of the system. What distinguishes it from ordinary operations is that it encompasses actions such as disabling, circumventing, or altering implemented security or privacy controls, or establishing system accounts — including performing system integrity checks, conducting patching operations, or administering cryptographic key management activities — all of which ordinary, non-privileged users are not authorized to perform. In practice, privileged functions typically involve the control, monitoring, or administration of the system and its security measures, and misuse of privileged functions — whether intentional or unintentional, by authorized users or by unauthorized entities — is treated as a serious risk, which is why logging their execution is a standard control mechanism.
Advisory only. A term this product ships is defined by an authority document, not by a search result.
Proposed during multiword review of this document in the CKI mapping queue.
Attested in
No recorded attestations. They are written when an MWE tagging stage is completed, stamped with the pack version and the document’s digest.