What is a privileged account?
A privileged account has powerful access, such as changing settings, managing users, installing software, or viewing sensitive data.
Simple example
An administrator account can create new users, reset passwords, and change security settings.
Why it matters
If a privileged account is compromised, the impact can be much greater than a normal user account.
Common warning signs
- The activity is unexpected or unusual for the business context.
- The request or system behaviour creates pressure to act quickly.
- Normal approval, verification, or security processes are bypassed.
- There are signs of unauthorised access, data exposure, or system change.
- Staff are unsure whether the request, message, or system behaviour is legitimate.
Cyber Doc view
This term should be understood in business context, not only as a technical issue. Good protection usually combines clear processes, appropriate technical controls, staff awareness, and a calm response plan.
What to do
Proactive steps
- Use separate admin accounts for administrative work.
- Require MFA for privileged accounts.
- Limit who has privileged access.
- Monitor admin activity.
- Review privileged access regularly.
Reactive steps
- Disable or secure the affected privileged account immediately.
- Review admin actions and audit logs.
- Reset credentials and MFA.
- Check for newly created accounts or changed permissions.
- Investigate whether systems or security settings were altered.
Related terms
- Least privilege
- Access control
- Account takeover