home/glossary/super user account

super user account

MWEid 163583·updated Sep 1, 2026
verified

No definition recorded.

Composition

super+user+account

Source

document
NIST SP 800-171 Rev 3 - Protecting CUI in Nonfederal Systems
found in
proposed during MWE review
element
e0206
proposed by
dorianc@moxywolf.com
discovery
ManualCuration
or superthe sentence this term was read in
Where the definition came fromawaiting curator confirmation

generalized from a web lookup of the quoted expression at proposal time Verdict: term of art.

A definition generalized from search results is a draft to react to, not provenance. Confirm it against an authority document before this term is verified.

A web lookup ran when this term was proposed

A privileged credential object that grants its holder unrestricted or near-unrestricted access to a system, application, or administrative domain — bypassing the normal permission boundaries that apply to standard users. Such accounts are used by administrators who have unrestricted access to files, directories, and resources, and NIST characterizes the holder as having authority to "perform security-relevant functions that ordinary users are not authorized to perform." In practice, the field treats "super user account" as a member of the broader class of privileged accounts subject to Privileged Access Management (PAM) controls — system administrators use privileged "super user" accounts to manage information technology, and the principle of least privilege recommends that most users and applications run under an ordinary account, as a superuser account is capable of making unrestricted, potentially adverse, system-wide changes. Compliance and governance frameworks require these accounts to receive heightened controls: for super user accounts and administrative access roles, MFA must be implemented and additional protections considered, including separate user accounts to isolate

Advisory only. A term this product ships is defined by an authority document, not by a search result.

Proposed during multiword review of this document in the CKI mapping queue.

Attested in

No recorded attestations. They are written when an MWE tagging stage is completed, stamped with the pack version and the document’s digest.

Classifications

No parent term linked
MWE terms inherit classifications from a parent verb or noun. This MWE has no parent linkage; it is classified only by term-type and status.

Framework definitions

No framework-specific definitions
This term has not been bound to a regulatory framework with a sense definition.

Outgoing relationships

No outgoing triples
This term is not the subject of any RDF-style relationship yet.

Incoming relationships

No incoming triples
No other term currently asserts a relationship to this one.