privileged function

A category of system operation whose execution carries security- or integrity-relevant consequences that ordinary users are not authorized to trigger—such as disabling or altering security controls, establishing accounts, performing integrity checks, administering cryptographic key material, or circumventing detection mechanisms. NIST SP 800-53 enumerates canonical examples as "disabling, circumventing, or altering implemented security or privacy controls, establishing system accounts, performing system integrity checks, and administering cryptographic key management activities." The category typically encompasses control, monitoring, or administration of a system and its security measures. In practice, the field uses the term to anchor least-privilege and separation-of-duties controls: misuse of privileged functions—whether intentional or unintentional, by authorized insiders or external actors who have compromised accounts—is treated as a serious risk, and logging their execution is a primary mitigation.